Plan and implement annual IT controls testing activities, creating test plans, managing schedules and execution for RDAR (BCBS 239) based on the overall program timelines
Adding IT applications to the controls testing scope by setting up on boarding activities, documentation and testing on the central controls\' repository
Coordinate with Control Owners on the adoption of controls and control matters applicable for RDAR
Liaise with IT risk leads and manager (IT ORMs) to schedule detailed control walk through with the IT teams to document and test specific controls based on requirements as outlined within central controls\' repository for Point of Focus (PoF) and RDAR specific IT controls
Perform annual re-testing / recertification of existing application scope
Perform design and operational effectiveness testing of IT controls in scope for BCBS 239
Review and quality assure the tests performed by the testing team and drive improvements
Perform testing on remediation of control matters and complete tasks to close the issue within central controls\' repository
Act as an SME supporting the BCBS239 Program Manager and Divisional Risk leaders providing insight and key analysis on aspects of IT controls testing
Support the program team on internal and external audits, quality reviews and any other regulatory initiatives
Coordinate with Chief Data Officers on scoping of applications and interface for BCBS 239
Support management reporting and escalation on IT controls testing
Play a key role in coordinating with other IT controls programs (SOX/IHC etc.) to drive synergies, consistency and improving efficiency
Your future colleagues
The department is a diverse-team based in New York, Raleigh, London, Pune and Singapore. The Control & Risk team is part of the Risk Technology function. The team provides wide range of Risk, Control and Regulatory services to the Risk Technology function globally (over 100+ IT applications and 1800 globally located staff). We welcome different and diverse points of view and encourage the participation and communication of all members. We appreciate honest and frank communication and respect all opinions and suggestions. We have a light hierarchical approach with clear responsibilities and encourage the independence on the execution of the objectives of the department. Team-work is a must, and we help each other on the work when the peaks of work and fire drills arrive. We encourage initiative and ability to think out of the box, challenging status quo and implementing change.
We are a department which values Diversity and Inclusion (D&I) and is committed to realizing the firms D&I ambition which is an integral part of our global cultural values.
Qualifications
Skills and experience include but are not limited to:
7+ years of experience in one of the following domains: Operational Risk Management, IT Control Framework Management (SOX, IHC, BCBS 239), Regulatory Program/Audit execution in the Financial industry
Excellent Knowledge of IT controls & compliance activities with a good understanding of BCBS 239/SOX IT control programs
Proven understanding and working knowledge of IT controls and processes covering Access Management, Release Management, Infrastructure Mgmt., Interface controls etc.
Outstanding understanding of Regulatory and Compliance standards/process
Proven experience of training and managing a team of 2-4 members
Test planning, reporting, escalations and issue resolution
Experience of IT controls documentation and testing - the central controls\' repository, would be an added advantage
Analytical skills to convert IT Controls Requirements to actions and implementable plans
Good knowledge of Excel, VBA, Tableau, Qlik or any other controls repository
Outstanding interpersonal and negotiation skills along with excellent written and verbal communication skills
Leadership skills to manage and complete complex tasks and projects
Demonstrated experience working and collaborating with different and diverse leaders geographically dispersed
Dedication to fostering an inclusive culture and value diverse perspectives