Description:
The Control Testing Specialist supports the implementation and ongoing assurance of DOR (Digital Operational Resilience) requirements within the first line of defense. The role is responsible for planning and executing control testing activities across ICT risk, resilience, and third-party risk domains, ensuring that controls are effective, well-documented, and audit-ready.
The successful candidate demonstrates strong ownership, attention to detail, and the ability to translate legal requirements and technical control assessments into clear, business-relevant insights for stakeholders and senior management.
Key Responsibilities
Control Testing Execution
- Plan and execute first-line control testing aligned with regulatory requirements (ICT risk management, incident management, resilience, third-party risk)
- Assess design and operating effectiveness of key controls supporting regulatory compliance
- Perform walkthroughs, evidence reviews, and sampling aligned with defined testing methodology
- Ensure consistency and traceability of testing across controls, entities, and domains
- Maintain structured documentation of test procedures, results, and conclusions
Findings Assessment & Reporting
- Identify and document control gaps, weaknesses, and non-compliance against legal requirements
- Translate technical findings into clear, concise business language with actionable recommendations
- Produce high-quality management reports, working papers, and summaries on control effectiveness and testing outcomes
- Track remediation actions, validate closure, and support retesting activities
Audit & Regulatory Readiness (First Line)
- Ensure audit-ready documentation for DOR-related controls (policies, procedures, evidence, testing records)
- Support preparation for internal audit, external audit, and regulatory inspections
- Coordinate timely and structured responses to audit and regulatory requests
- Strengthen quality of control narratives and evidence to meet regulatory expectations
- Contribute to lessons learned and continuous improvement post-assessments
Project & Stakeholder Management
- Coordinate testing plans, timelines, and dependencies across multiple stakeholders
- Engage with technology, risk, compliance, and business teams to facilitate testing and remediation
- Provide structured updates to governance forums on progress, risks, and findings
- Escalate issues proactively with clear recommendations and mitigation options
Continuous Improvement
- Enhance control testing methodology, templates, and quality standards aligned with DOR
- Promote best practices in evidence management, traceability, and documentation
- Identify opportunities to improve efficiency, consistency, and automation in testing and reporting
We are seeking professionals with:
- University degree in IT/Engineering/Science
- 5–8 years of experience in technology risk, internal controls, audit, or compliance testing
- Proven experience in control testing and audit readiness in regulated environments
- Exposure to DORA (similar to Swift Oversight Law), operational resilience, ICT risk, or similar regulatory frameworks is highly desirable
- Understanding of technology risk domains (ITGCs, resilience, security, outsourcing)
- Excellent attention to detail and commitment to high-quality deliverables
- Ability to articulate technical findings into business-oriented insights
- Strong planning, coordination, and stakeholder engagement skills
- High degree of ownership, autonomy, and accountability
- Structured, analytical, and solution-driven mindset
- Experience with control repositories, evidence management, and reporting tools is an asset