Location / Hybrid : Malvern, PA 3 / days onsite (Tues-Thursday) , 2 days remote
Length : 9 months+
Background check includes :
- 10 years background
- Drug test
- Finger Printing
About the Role
We are seeking a meticulous and experienced IT Internal Controls Tester to join our dedicated internal controls testing team. This is a hands-on role focused strictly on evaluating and documenting the operational effectiveness of our technology controls within a highly regulated enterprise environment.
The ideal candidate will have 25 years of direct experience performing evidence-based control testing. You will work within our GRC tools to conduct testing across various IT domains, ensuring compliance with established frameworks (SOX, NIST, ISO 27001). This position requires a strong technical background and exceptional attention to detail, but does not focus on risk assessments or financial / business process audits.
Key Responsibilities
Execute Control Testing : Perform recurring internal technology control tests (weekly, quarterly, annually) to determine if controls are working effectively or ineffectively.Documentation & Evidence : Meticulously perform evidence-based testing and document results, findings, and supporting artifacts within our GRC tools, ensuring clear organization and follow-through.Control Areas : Focus testing on internal controls across key areas, including :Access ManagementData ProtectionsInfrastructure and Cloud Governance (AWS, Azure)System Change Controls (GitHub, ServiceNow)Communication : Clearly communicate testing status, findings, and compliance requirements to both technical and non-technical stakeholders across the organization.Compliance & Frameworks : Ensure testing aligns with established IT risk frameworks such as SOX, NIST, COSO, or ISO 27001 standards.Required Qualifications and Skills
Experience : 25 years of experience in IT Audit, Controls Testing, or Risk & Compliance roles.Technical Background : Experience performing internal technology-related audits and working specifically on IT audit teams.Control Testing Expertise : Demonstrated experience with the mechanics of a control test to determine operational effectiveness.Enterprise Environment Comfort : Comfortable operating in regulated enterprise environments where processes are documented and strictly followed.Communication & Detail : Strong attention to detail, excellent organizational skills, and the ability to communicate findings clearly and effectively.Familiarity with the following tools is helpful but not required, as these represent systems commonly in scope for testing :
Identity / Access Tools : ACF2, SailPoint, CyberArk, Active DirectoryCloud / Infrastructure : AWS, Azure, Elastic, WizSystem / Application Tools : Oracle, DB2, Control-M, BitLocker, GitHub, ServiceNow, Tanium, NetBackupOS & End-User Systems : Windows environments (e.g., Windows 11)