Technology Risk & Controls Analyst, ET & Corporate

Overview

Second-line Technology Risk & Controls Analyst supporting the controls assurance programme across Business Platforms and Corporate applications, with a focus on ITGC and SOX compliance for ERP environments.

What you'll do

• Perform control design and operating effectiveness testing across ERP and corporate systems
• Execute testing across key control areas (e.g. access management, change management, interfaces, automated controls)
• Document testing procedures, results, and conclusions clearly and in line with defined standards
• Identify and escalate control gaps, inconsistencies, or missing evidence to Senior team members
• Support internal and external audit activities by preparing and collating control evidence
• Track audit requests and ensure timely completion of assigned actions
• Assist in responding to audit queries, ensuring accuracy and completeness of information provided
• Liaise with control owners and application teams to request and validate control evidence
• Support interactions with stakeholders, escalating complex queries where required
• Build working relationships with key stakeholders while maintaining professional independence
• Support the preparation of controls reporting, trackers, and dashboards for audit and management reporting
• Assist in analysing control data to identify patterns, recurring issues, or gaps
• Contribute to improving the consistency and quality of management information
• Contribute to standardisation of control testing approaches, templates, and documentation
• Support initiatives to improve evidence quality and audit readiness
• Assist with adoption of automation, reporting tools, and emerging AI-enabled techniques for assurance activities
• Proactively build knowledge of ITGCs, SOX controls, and ERP environments
• Seek feedback and continuously improve technical and stakeholder skills
• Support team activities and contribute to a collaborative, high-performing environment

What you'll need

• Prior experience in IT audit, ITGC and SOX compliance (SOX 404)
• Ability to execute control testing accurately, consistently and in line with defined methodologies
• Strong attention to detail with a focus on evidence quality and documentation standards
• Ability to work proactively, managing assigned tasks and deadlines with minimal supervision
• Strong communication skills, with the ability to explain control requirements clearly to technical and non-technical stakeholders
• Effective time management skills and ability to operate in a fast-paced, multi-audit environment
• Strong interpersonal skills with the ability to build constructive working relationships across global teams
• Highly organised with the ability to manage multiple workstreams simultaneously
• Proactive and willing to challenge where needed

Nice to have

• Certifications such as CISA, CIA, CRISC

Details

• Location: Chennai, India
• Hybrid approach with teams in the office around four days a week
• Works closely with Application and Control owners, Financial Risk & Control colleagues and auditors