FDM is a global business and technology consultancy seeking an IT Controls Test Lead to work for our global systems integrator client and take overall
responsibility for the planning, coordination, and execution oversight of ITGC
testing activities, in line with the approved Risk and Controls Matrix (RACM)
and agreed test methodology. This is initially a 6 month contract with the potential to extend and will be a remote role.
You’ll work closely with Group Finance, system
owners, technology support teams, and auditors to ensure testing is delivered
to plan, evidence is audit‑ready, and outcomes are clearly communicated. While
remaining hands‑on where required, you’ll provide day‑to‑day
leadership and guidance across the controls testing activity, ensuring
consistency of approach, quality of documentation, and timely progression of
remediation actions. You’ll also oversee the review of SOC1 reports for
supplier‑managed applications and ensure identified control
gaps are appropriately assessed and recorded.
You’ll operate under
the direction of the Group Director – Governance & Portfolio Compliance,
acting as the primary escalation point for testing delivery matters and
providing clear reporting to the IT Risk Manager.
Responsibilities:
- Leading the planning and
scheduling of IT controls testing across an agreed application estate
- Acting as the primary point
of contact for ITGC testing activity across relevant stakeholders
- Coordinating system owners
and support teams to secure access, evidence, and testing windows
- Overseeing and, where
required, executing ITGC testing in line with the approved RACM and
methodology
- Reviewing and assuring the
quality of testing outputs, sampling approaches, and retained audit
evidence
- Identifying, documenting, and
validating control deficiencies and associated remediation actions
- Reviewing SOC1 reports for
supplier‑managed systems and assessing
control coverage and gaps
- Ensuring control descriptions
remain accurate where technology or processes change
- Escalating material control
issues and reporting deficiencies to the IT Risk Manager for inclusion in
the risk register
- Providing regular status
updates on testing progress and delivery against the plan
- Ensuring all assigned testing
activity is completed within the six‑month
term