Technology Assurance Senior Specialist

Overview

The Technology Risk & Controls Analyst is a second line role within WPP's Technology Risk & Controls function, providing independent assurance over Technology Operations control environments under the direction of the Technology Risk & Controls Manager, Tech Ops.

What you'll do

• Perform control design and operating effectiveness testing across Technology Operations processes, including change management, access management, incident/problem management, backup and resilience controls, under the guidance of the Manager
• Support internal, external and client audits impacting Technology Operations, including preparation, coordination of evidence and response to audit queries
• Liaise with Control Owners and Control Operators to obtain, validate and clarify audit evidence and control documentation
• Maintain accurate and complete documentation of risks, controls, testing results and remediation activity in line with WPP assurance standards
• Support the monitoring and tracking of audit deficiencies relating to Tech Ops control failures, including following up remediation actions
• Review remediation evidence to confirm actions have been implemented as designed and address the underlying risk
• Perform detailed walkthroughs of automated and manual controls to understand system configuration and operational execution
• Identify and document potential mitigating controls for control gaps or deficiencies, escalating judgement areas to the Manager
• Assist in the development and maintenance of Risk & Controls Matrices and Standard Operating Procedures for Technology Operations control environments
• Prepare clear status updates and working papers for review by the Technology Risk & Controls Manager
• Escalate control issues, evidence gaps or delivery risks promptly to ensure timely resolution

What you'll need

• Solid understanding of Technology Operations control environments, including ITGCs, IAM, infrastructure, cloud platforms and service management processes
• Prior experience in internal or external IT audit, risk or controls assurance roles
• Working knowledge of SOX 404 and experience supporting SOX audits within complex or large-scale technology environments
• Ability to execute control testing accurately, consistently and in line with defined methodologies
• Strong attention to detail with a focus on evidence quality and documentation standards
• Ability to work proactively, managing assigned tasks and deadlines with minimal supervision
• Strong communication skills, with the ability to explain control requirements clearly to technical and non-technical stakeholders
• Effective time management skills and ability to operate in a fast-paced, multi-audit environment
• Strong interpersonal skills with the ability to build constructive working relationships across global teams
• Highly organised with the ability to manage multiple workstreams simultaneously

Nice to have

• Exposure to data migration assurance and reconciliation processes
• Relevant certifications (e.g. CISA, CIA, CRISC)

Details

• Location: Chennai, India
• Hybrid working, with teams in the office around four days a week
• Accommodations or flexibility can be discussed with the hiring team during the interview process