ICFR IT Controls Testing - Banking

We are currently looking for an ICFR IT Controls Testing professional for our UAE operations. This role supports the Finance Division in maintaining and enhancing the Bank’s Internal Control over Financial Reporting (ICFR) framework through the independent testing and evaluation of General IT Controls (GITCs), IT Application Controls (ITACs), Interface Controls, and Information Produced by the Entity (IPE). The role is responsible for assessing control effectiveness, identifying control deficiencies, supporting remediation activities, and collaborating with Finance, IT, and audit stakeholders to ensure the integrity, reliability, and compliance of systems and processes supporting financial reporting.

Location: Dubai, United Arab Emirates

Requirements

• Bachelor’s degree in information systems, Information Technology, Accounting, Finance, Computer Science, or a related field.
• Professional certification such as CISA, CIA, CPA, CA, ACCA, CRISC, CISSP, or equivalent preferred.
• 4–7 years of experience in IT Audit, ICFR/SOX Compliance, IT Risk, Internal Audit, or Risk Advisory, preferably within banking or financial services.
• Hands-on experience in GITC, ITAC, Interface Controls, and IPE testing.
• Knowledge of ICFR, COSO, and COBIT frameworks.
• Experience with core banking systems, ERP platforms (e.g., Finacle, SAP, Oracle), and financial reporting applications.
• Understanding of system interfaces, database concepts, and automated business processes.
• Experience supporting internal/external audits and regulatory reviews.
• Proficiency in Microsoft Excel and data analysis techniques.
• Strong analytical, communication, documentation, stakeholder management, and problem-solving skills, with the ability to work independently and meet deadlines.

Main Responsibilities and Accountabilities

• Perform testing of the design and operating effectiveness of IT controls supporting financial reporting.
• Document process walkthroughs, risk and control assessments, testing workpapers, and conclusions.
• Identify control deficiencies, assess their impact, and track remediation activities.
• Ensure testing is performed in line with ICFR methodology and audit requirements.
• Test key IT controls including User Access Management, privileged access, segregation of duties, change management, and IT operations controls.
• Validate the completeness and accuracy of Information Produced by the Entity (IPE).
• Coordinate with IT and business stakeholders to obtain and assess supporting evidence.
• Test automated controls, system configurations, workflows, calculations, and validations impacting financial reporting.
• Assess the reliability of system functionality and key reports used in financial processes.
• Validate the completeness, accuracy, and integrity of system-generated information relied upon for control execution.
• Evaluate interfaces between systems supporting financial reporting.
• Verify the completeness, accuracy, and timeliness of data transfers through reconciliations and exception analysis.
• Assess interface monitoring, error handling, logging, and exception management controls.
• Escalate interface failures, data integrity issues, and control exceptions.
• Support internal and external audits by providing testing documentation, evidence, and management responses.
• Monitor and report on control deficiencies, audit findings, and remediation plans.
• Prepare testing summaries, status reports, and management updates on IT control effectiveness.

Work Conditions
Joining time frame: Immediate