AM- IT CTM

Associate Manager – Technology Controls Testing and Monitoring

About the Team: -

The PhonePe Financial Services Compliance team plays a critical role in the successful execution of
the firm & compliance mission. The Compliance function ensures the development and maintenance
of a strong compliance culture by developing and maintaining program infrastructure that identifies,
measures and monitors compliance with applicable laws, regulations and rules that govern our
business globally.
Compliance teams work closely with business, legal, risk, and audit functions to provide expertise on
regulatory compliance matters, assess and measure compliance and related risks, and monitor and
test the adequacy of the firm & compliance control environment. The Associate Manager -
Technology Controls Testing and Monitoring role is relatively new within the PhonePe Technology
Risk & Compliance team with responsibility for oversight of consistent implementation of technology
controls & practices to ensure successful audit outcomes. Such practices will include a common
approach and framework for risk assessment, monitoring, testing and surveillance activities.

 The Assistant Manager - Technology Controls Testing and Monitoring is responsible for the timely
and effective management and execution of the Compliance Testing program. As a member of the
Team, the individual reports into the Manager, Compliance and will be based in Bangalore, India. The
individual should have a technology audit or technology risk & compliance monitoring/testing
background with a strong risk and control mindset.

Roles and Responsibilities:
 Verify the control checklist required for the review for each regulatory and unregulated
functions 
 Designing and executing test steps, meeting deadlines to evaluate compliance with rules and
regulations.
 Formulate questions to be asked during walkthroughs and lead walkthroughs when called
upon
 Provide rough drafts of issue documentation
 Follow up with control owners on closing attestations and any open issues

Role Requirements:
 4 to 5 years of work experience, BE / relevant experience in Group 4 consultancies, or likes of
Group 4. CISA / DISA / CISSP preferred.
 Working knowledge of security domains such as logical and physical access, SDLC, change
management, network security and vulnerability management.
 Has high ethical standards and are able to work diligently to complete your duties.
 Strong interpersonal skills, proactive and team-oriented player.
 Security certifications such as ISO 27001:2013 Lead Implementer or ISO 27001:2013 Lead
Auditor, CISA, CISSP (preferred).