Job Description
Title (Technical Specialist - Controls Assurance)
Department (Technology Controls Assurance )
Location (Gurgaon India)
Reports To (Senior Manager - Technology Controls Assurance)
Level (Grade 4)
We share a commitment to making things better for clients and each other. We continually explore new technology and different ways of working to put our clients first. So bring your boldest ideas to our Technology Controls and Assurance (TCA) team and feel like you’re making progress.
About Us
We’re proud to have been helping our clients build better financial futures for over 50 years. How have we achieved this? By working together - and supporting each other - all over the world. So, join our team and feel like you’re part of something bigger.
About your team
The Technology Controls and Assurance (TCA) team is part of the Global Cyber & Information Security (GCIS) group, reporting to the Head of Global Information Security which is a centralized global team with responsibility for supporting assurance activities across Technology and Enterprise services function, working closely with our internal and external auditors in delivering business value from Technology and Digital (T&D) Department in a consistent and transparent way. The scope of the TCA team covers support to T&D in managing their Technology and Information Security risks; Facilitation of External Audit and Certifications to Industry Standards (such as ISO, PCI DSS SWIFT and ITGC (including monitoring, testing and internal control testing/ verifications to ensure controls throughout T&D are working effectively).
About your role
As a Technology Specilaist, you will collaborate closely with the Technology and Digital teams to support the organization’s compliance with various standards and certifications, including ISAE 3402/SOC 2, ISO 42001. Your responsibilities will include coordinating audit programs with internal stakeholders and external auditors, managing the certification lifecycle to ensure timely renewals and ongoing compliance, and spearheading continuous improvement initiatives.
You will define and monitor key performance indicators (KPIs) and key risk indicators (KRIs), maintaining an effective control library aligned with organizational policies and regulatory requirements. Additionally, you will lead efforts to automate control testing and evidence collection, thereby increasing the efficiency and accuracy of compliance reporting. Collaborating with both technology and business teams, you will help implement effective controls and act as a key point of contact during audit processes.
With expertise in IT General Controls, you will identify opportunities for process simplification and automation, driving ongoing enhancements. You will also serve as a trusted advisor on AI governance, ensuring alignment with ISO 42001 standards and ethical AI principles.
This role involves complex challenges and requires strong data analysis skills, including proficiency in advanced Excel functions and data visualization tools, to define KPIs and KRIs, report on control effectiveness, and analyze non-compliance issues for corrective actions. The ideal candidate is a strategic thinker with the ability to resolve system issues and propose innovative solutions. Furthermore, you should be a collaborative team player capable of liaising effectively with geographically dispersed Technology teams.
Your key accountabilities
- Data analysis and data modelling capabilities in order, to define KPI’s and KRI’s for key controls indicators.
- Automated Control Testing for Key controls against FIL Policies to report on control effectiveness.
- Preventive, Detective and Corrective Control Measures to mitigate the operational and functional risk.
- Support in ITGC control testing and facilitation.
- Perform Management Review on Key controls on quarterly and bi-annually basis.
- Understanding on ISAE 3402/SOC 2, ISO 27001 Controls and it’s testing approach.
- Provide subject matter expertise and support for IT General Controls (ITGC) and management control testing, ensuring alignment with certification requirements.
- Collaborate with technology and business teams to ensure effective implementation of preventive, detective, and corrective controls. Act as a liaison between internal stakeholders and external auditors to facilitate successful audits and assessments.
- Act as a trusted advisor to business, technology, and non-technology teams on AI governance and assurance practices, aligned with ISO 42001 and FIL’s ethical AI principles.
- Coordination with various internal stakeholders, as well as the external auditors for successful audit programm.
Your skills and experience
- Graduate from reputed institute with 7+ years of experience and progressive working knowledge of ITGC/SOC 2 Audits, Governance, Risk and Compliance domain and associated technologies
- Strong understanding of Information Security control frameworks and standards like, AI 42001, ISO 27001, NIST and CoBIT etc.
- Ability to multi-task and prioritise workload.
- Able to drive the internal control assessment and testing with pro-active reporting and escalation to fix the non-compliances on timely manner.
- Commitment to high standards of excellence and integrity.
- Excellent verbal and written communicator, who can consistently deliver high quality work and engage and influence key stakeholders at all levels
- Ability to work as part of a team and contribute towards team goals, but equally able to work independently and deliver results.
- Process focused and should be able to deliver high quality documentation, Presentation, Reports and Dashboards using MS Office or other data visualisation tools like Power BI
- Added advantage to have professional certifications like AI 42001 LA, ISO 27001 LA, CRISC, CISA and CISSP.
Feel rewarded
For starters, we’ll offer you a comprehensive benefits package. We’ll value your wellbeing and support your development. And we’ll be as flexible as we can about where and when you work – finding a balance that works for all of us. It’s all part of our commitment to making you feel motivated by the work you do and happy to be part of our team. For more about our work, our approach to dynamic working and how you could build your future here, visit careers.fidelityinternational.com.
For more about our work, our approach to dynamic working and how you could build your future here, visit careers.fidelityinternational.com.
Skills Required
- Graduate from a reputed institute
- 7+ years of experience with progressive working knowledge of ITGC or SOC 2 audits, Governance, Risk and Compliance, and associated technologies
- Strong understanding of information security control frameworks and standards, including ISO 42001, ISO 27001, NIST, and COBIT
- Ability to multitask and prioritize workload
- Ability to drive internal control assessment and testing, with proactive reporting and escalation of non-compliances
- Excellent verbal and written communication skills, including stakeholder engagement and influence
- Ability to work independently and collaboratively as part of a team
- Ability to produce high-quality documentation, presentations, reports, and dashboards using Microsoft Office or data visualization tools such as Power BI
- AI 42001 Lead Auditor certification
- ISO 27001 Lead Auditor certification
- CRISC certification
- CISA certification
- CISSP certification
Fidelity International Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Fidelity International and has not been reviewed or approved by Fidelity International.
-
Parental & Family Support — Family leave and carers’ support are emphasized via equalized paid parental leave globally and enhanced maternity/adoption policies. Inclusive provisions also cover carers’ leave and compassionate leave to support diverse family needs.
-
Healthcare Strength — Healthcare benefits and private medical insurance are consistently highlighted as part of the core package across locations. Wellbeing resources, including an Employee Assistance Programme and menopause support, reinforce the depth of health coverage.
-
Retirement Support — Pension and retirement savings are positioned as a strong element of the total package in multiple markets. Retirement design is frequently cited alongside paid time off and flexibility as part of a solid overall offer.
Fidelity International Insights
What We Do
Fidelity International offers investment solutions and services and retirement expertise to more than 2.5 million customers globally. As a privately held, purpose-driven company with a 50-year heritage, we think generationally and invest for the long term. Operating in more than 25 countries and with $739.9 billion* in total assets, our clients range from central banks, sovereign wealth funds, large corporates, financial institutions, insurers and wealth managers, to private individuals. Our Workplace & Personal Financial Health business provides individuals, advisers and employers with access to world-class investment choices, third-party solutions, administration services and pension guidance. Together with our Investment Solutions & Services business, we invest $567 billion on behalf of our clients. By combining our asset management expertise with our solutions for workplace and personal investing, we work together to build better financial futures. *Data as of 31 March 2021
