Risk Lines of Defense Professionals

About the Role

• Support enterprise risk and controls assurance programs across Compliance, ITGC, Information Security, and SOX domains.
• Perform control testing or independent validation within a structured Three Lines of Defense framework.
• Evaluate control design, operating effectiveness, and remediation activities through evidence-based assessments.
• Partner with risk, compliance, technology, and audit stakeholders to strengthen governance and control environments.
• Contribute to audit-ready, regulator-ready, and defensible risk management outcomes within financial services environments.

Job Description

• Execute Test of Design (TOD) and Test of Effectiveness (TOE) activities or perform independent validation of completed testing.
• Assess control alignment to internal standards, regulatory requirements, and risk management frameworks.
• Evaluate sampling methodologies, evidence quality, control coverage, and testing conclusions.
• Identify control gaps, challenge findings where appropriate, and support remediation tracking.
• Prepare audit-defensible documentation including findings, root cause analysis, evidence assessments, and remediation recommendations.
• Manage issue lifecycle activities from identification through closure validation.
• Support risk reporting, dashboard preparation, stakeholder communication, and governance reviews.
• Maintain high-quality documentation within GRC platforms and ensure adherence to independence standards.
• Contribute to quality assurance reviews, thematic risk assessments, and continuous improvement initiatives.

Apply Now

Qualifications

Educational Qualifications

• Bachelor’s degree in Finance, Business Administration, Information Systems, Information Technology, Accounting, or a related discipline.
• Professional certifications such as CISA, CRISC, CISSP, CIA, CPA, CISM, or equivalent are preferred.
• Additional certifications in Risk Management, Information Security, Compliance, or Internal Audit are advantageous.

Experience

• 2–12 years of experience in controls testing, IT audit, operational risk, risk oversight, controls assurance, or independent validation functions.
• Experience working within First Line of Defense (1LOD), Second Line of Defense (2LOD), Internal Audit, Compliance, or Risk Management environments.
• Exposure to banking, financial services, or regulated industry control frameworks is preferred.
• Experience performing TOD and TOE assessments across operational, compliance, technology, or information security controls.
• Hands-on experience supporting audits, regulatory reviews, issue management, and remediation validation activities.
• Experience utilizing GRC platforms and maintaining audit-ready documentation.

Skills

• Strong understanding of Compliance Controls, SOX controls, IT General Controls (ITGC), and Information Security control frameworks.
• Knowledge of regulatory compliance requirements, financial crime controls, consumer protection controls, and regulatory reporting obligations.
• Expertise in ITGC domains including Access Management, Change Management, Operations, and Software Development Lifecycle (SDLC).
• Understanding of Information Security domains including Vulnerability Management, Incident Response, Cloud Security, and Cybersecurity Controls.
• Strong knowledge of risk management frameworks such as COSO, Three Lines of Defense, NIST, and related control standards.
• Hands-on experience with GRC platforms including Archer, MetricStream, or ServiceNow GRC.
• Strong SOX, ITGRC, controls testing, and validation fundamentals.
• Advanced Excel skills for sampling, testing analysis, and risk reporting.
• Ability to create high-quality, audit-defensible, regulator-ready documentation and working papers.
• Strong analytical thinking, professional skepticism, and evidence-based decision-making capabilities.
• Experience managing issue lifecycle activities, remediation validation, and risk escalation processes.
• Excellent stakeholder management, presentation, and communication skills.
• Ability to identify thematic and systemic control risks beyond individual control deficiencies.
• Strong commitment to independence, governance standards, and quality assurance practices.

Perks and Benefits

• 2-way cab pick-up and drop-off facility for a stress-free commute.
• One complimentary meal provided during the shift.
• Exposure to multiple functional areas, enhancing your professional growth.
• Supportive work environment focused on learning and development.

Training Support

• Comprehensive project-specific training will be provided to help you succeed in your role.