Job Title: IT Control testing
About Us
“Capco, a Wipro company, is a global technology and management consulting firm. Awarded with Consultancy of the year in the British Bank Award and has been ranked Top 100 Best Companies for Women in India 2022 by Avtar & Seramount. With our presence across 32 cities across globe, we support 100+ clients across banking, financial and Energy sectors. We are recognized for our deep transformation execution and delivery.
WHY JOIN CAPCO?
You will work on engaging projects with the largest international and local banks, insurance companies, payment service providers and other key players in the industry. The projects that will transform the financial services industry.
MAKE AN IMPACT
Innovative thinking, delivery excellence and thought leadership to help our clients transform their business. Together with our clients and industry partners, we deliver disruptive work that is changing energy and financial services.
#BEYOURSELFATWORK
Capco has a tolerant, open culture that values diversity, inclusivity, and creativity.
CAREER ADVANCEMENT
With no forced hierarchy at Capco, everyone has the opportunity to grow as we grow, taking their career into their own hands.
DIVERSITY & INCLUSION
We believe that diversity of people and perspective gives us a competitive advantage.
MAKE AN IMPACT
Requirements:Job Title: IT control Testing
Experience
The Senior IT Controls Tester / Manager will play a key role in planning, leading, and overseeing independent controls testing activity across a broad technology and operational risk landscape. The role requires strong subject matter expertise in IT controls, sound risk judgement, and the ability to lead testing activity with credibility, consistency, and independence. The successful candidate will work closely with programme teams, control owners, technology stakeholders, and risk and assurance partners to ensure that closure decisions are supported by robust control validation and clear reporting.
Principal Responsibilities
- Lead the planning and execution of independent IT controls testing across key change programme.
- Define and oversee test scope, approach, and methodology to assess the design adequacy and operating effectiveness of key IT controls.
- Provide independent assurance over control environments across areas including access management, change management, cyber/security, resilience, infrastructure, SDLC, data, and operational controls.
- Assess programme closure readiness by validating that control requirements, remediation actions, and risk treatment commitments have been completed, evidenced, and are sustainable.
- Review and challenge management evidence, testing artefacts, and closure submissions to ensure conclusions are robust, objective, and traceable.
- Identify and evaluate control weaknesses, thematic risks, and residual exposures, and provide clear recommendations or closure positions.
- Prepare and present high-quality testing outputs, assurance papers, and management summaries for governance forums, senior stakeholders, and oversight committees.
- Escalate significant issues, testing exceptions, and material residual risks in a timely and appropriate manner.
- Drive consistency, quality, and audit readiness across testing documentation, workpapers, reporting, and evidence management.
- Provide guidance, oversight, and quality review for more junior testers or contributors, as applicable.
- Contribute to the ongoing enhancement of testing frameworks, assurance methodologies, templates, standards, and quality controls.
- Build strong working relationships across technology, risk, controls, audit, and programme delivery teams while preserving the independence of the testing function.
Requirements
To be successful in this role you should meet the following requirements:
- Significant experience in IT controls testing, technology risk, IT audit, internal controls assurance, or a related control assurance discipline.
- Strong knowledge of IT general controls and broader technology risk and control frameworks, including identity and access management, change control, cyber security, incident/problem management, resilience, infrastructure, SDLC, and data-related controls.
- Proven ability to lead control assessments covering both design effectiveness and operating effectiveness, including evaluation of remediation actions and closure evidence.
- Experience in independently challenging stakeholders and forming balanced, risk-based conclusions supported by clear evidence.
- Strong understanding of governance, risk management, and assurance expectations within large and preferably regulated organizations.
- Ability to manage multiple testing activities, priorities effectively, and deliver to tight timelines without compromising quality.
- Strong written and verbal communication skills, including the ability to present complex control issues to senior stakeholders in a concise and credible manner.
- Experience leading reviews, coaching team members, or providing quality assurance over testing outputs would be advantageous.
- Experience supporting major programmes, enterprise transformation, or closure governance activity is highly desirable.
Qualifications
- Bachelor’s degree or equivalent experience in Information Technology, Cybersecurity, Risk, Audit, or a related discipline.
- Professional certifications such as CISA, CRISC, CISSP, CIA, ITIL, or ISO 27001 are advantageous.
The role holder will demonstrate
- Strong independence, integrity, and professional judgement
- A well-developed risk and control mindset
- Credibility in stakeholder engagement and constructive challenge
- High attention to detail and strong quality discipline
- Leadership capability and confidence in complex delivery environments
- A pragmatic, evidence-based approach to assurance and decision support
Why join us
This role offers the opportunity to influence critical programme and closure decisions by providing robust, independent assurance across the technology control environment. You will operate at the intersection of risk, technology, and change, helping to strengthen governance, improve control outcomes, and support confident decision-making across strategic initiatives.
Skills Required
- Significant experience in IT controls testing, technology risk, IT audit, internal controls assurance, or related control assurance
- Strong knowledge of IT general controls and technology risk and control frameworks
- Knowledge of identity and access management, change control, cybersecurity, incident and problem management, resilience, infrastructure, SDLC, and data-related controls
- Experience assessing design effectiveness and operating effectiveness
- Experience evaluating remediation actions and closure evidence
- Ability to independently challenge stakeholders and form evidence-based, risk-based conclusions
- Understanding of governance, risk management, and assurance expectations in large, preferably regulated organizations
- Ability to manage multiple testing activities and deliver to tight timelines
- Strong written and verbal communication skills, including presenting complex control issues to senior stakeholders
- Bachelor's degree or equivalent experience in Information Technology, Cybersecurity, Risk, Audit, or a related discipline
- Experience leading reviews, coaching team members, or providing quality assurance over testing outputs
- Experience supporting major programmes, enterprise transformation, or closure governance activity
- Professional certification such as CISA, CRISC, CISSP, CIA, ITIL, or ISO 27001
What the Team is Saying
Capco Compensation & Benefits Highlights
-
Healthcare Strength — Health, dental, and vision coverage in the U.S. are characterized as strong, with good coverage and favorable costs. Mental health resources and broader wellbeing programs are also emphasized as part of a comprehensive package.
-
Leave & Time Off Breadth — PTO and paid holidays are described as generous, with multiple mentions of strong vacation allowances. While client work can affect usage, the underlying entitlement is presented as solid.
-
Parental & Family Support — Company materials highlight enhanced family-friendly policies, including substantial maternity and paternity leave. Flexibility and return-to-work support reinforce a family-oriented approach.
Capco Insights
What We Do
Capco, a Wipro company, is a global management and technology consultancy specializing in driving transformation in the energy and financial services industries. Capco operates at the intersection of business and technology by combining innovative thinking with unrivalled industry knowledge to fast-track digital initiatives for banking and payments, capital markets, wealth and asset management, insurance, and the energy sector. Capco’s cutting edge ingenuity is brought to life through its award-winning Be Yourself At Work culture and diverse talent. TRUSTED ADVISORS - Our collaborative and entrepreneurial approach position us as trusted long-term partners to our clients. DEEP EXPERTISE - Clients look to us for clear guidance, proven expertise, and the support they need to set their companies up for success. DISRUPTIVE SOLUTIONS- We do not provide off -the-shelf answers to clients’ challenges. Instead, we work in close collaboration to understand the issues, and craft disruptive, bespoke solutions. ACCOUNTABILITY AND OWNERSHIP - We recognize every client has distinct needs and expectations, and we take ownership and accountability for the solutions we design, build, and deliver.
Why Work With Us
We support and encourage an inclusive culture, entrepreneurial outlook and independent thinking. Capco is not about organizational charts and rigid hierarchies – we want all employees to feel that Capco is their firm to own and run. We believe diversity powers innovation. Be Yourself At Work (#BYAW) is an integral and underlying part of our culture
Gallery
Capco Offices
Hybrid Workspace
Employees engage in a combination of remote and on-site work.
