Testing Analyst (COE) – DT Controls

Job Title: Testing Analyst (COE) – DT Controls

Role Overview: 

The DT Controls and Site Audit team is developing an ITGC Testing Center of Excellence (COE) for testing Otis’ DT Controls across the global Otis organization. The Testing Analyst will become part of this COE.

On a typical day you will: 

Roles and responsibilities for ITGC Testing Specialist/Analyst that will work for this team include, but are not limited to:

• Conduct IT General Controls (ITGC) compliance testing across local and global applications and respective supporting infrastructure and technologies.
• Identify and document any control deficiencies.
• Completely and accurately document testing completed and upload evidence to required tracking system(s).
• Collaborate with stakeholders to
  • Ensure data samples provided are complete and accurate.
  • Escalate issues found to regional DT Controllers.
  • Ensure remediation complete by deadline required to perform additional re-testing.
• Build strong relationships with application & infrastructure owners, as well as technology subject matter experts.
• Become a subject matter expert in testing COE.
• Provide weekly status on progress of testing activities, issues identified, challenges.
• Collaborate with other team members on ITGC Testing COE team, DT Controllers, and DT Compliance Analysts to continuously improve processes and procedures.

What You Will Need to be Successful: 

• Intermediate to advanced knowledge of the following:
  • Information technology, systems, data governance, cyber and/or information security risks as well as industry trends
  • IT compliance, standards, and framework
  • Sarbanes Oxley (SOX) compliance requirements
  • ITGC controls, processes, and methodologies
• Experience conducting ITGC control reviews.
• Good presentation, interpersonal, written, and verbal communication skills.
• Proficient computer navigation skills using a variety of software packages, including Microsoft Office applications, Archer, Blackline.
• Skilled in using raw data to creating pivot tables and charts in Excel.
• Ability to work independently, but also having strong teamwork and collaboration skills.
• Ability to understand and work in complex environment, including ability to communicate complex processes in common language to auditors.
• Confidence to escalate issues appropriately.
• Continuous improvement mindset, including willingness to suggest and action process improvements.
• Familiarity with multiple regulatory controls (e.g. HIPPA, PCI, GDPR, SOX, NIST, ISO etc.)

Applicable professional certifications (e.g., ISO 27001 LA, CISM, CISA, GSNA, CISSP, CRISC, CIA) are a benefit.