Control Testing Specialist

ABOUT US

Were the worlds leading provider of secure financial messaging services headquartered in Belgium. We are the way the world moves value across borders through cities and overseas. No other organisation can address the scale precision pace and trust that this demands and were proud to support the global economy.

Were unique too. We were established to find a better way for the global financial community to move value a reliable safe and secure approach that the community can trust completely. Were always striving to be better and are constantly evolving in an ever-changing landscape without undermining that trust. Five decades on our vibrant community reflects the complexity and diversity of the financial ecosystem.

We innovate diligently test exhaustively then implement a connected and exciting era our mission has never been more relevant. Swift now has a presence in 200 countries and legal territories to serve a community of more than 12000 banks and financial institutions.

The Control Testing Specialist supports the implementation and ongoing assurance of DOR (Digital Operational Resilience) requirements within the first line of defense. The role is responsible for planning and executing control testing activities across ICT risk resilience and third-party risk domains ensuring that controls are effective well-documented and audit-ready.

The successful candidate demonstrates strong ownership attention to detail and the ability to translate legal requirements and technical control assessments into clear business-relevant insights for stakeholders and senior management.

Key Responsibilities

Control Testing Execution

• Plan and execute first-line control testing aligned withregulatoryrequirements (ICT risk management incident management resilience third-party risk)

• Assess design and operating effectiveness of key controls supportingregulatorycompliance

• Perform walkthroughs evidence reviews and sampling aligned with defined testingmethodology

• Ensure consistency and traceability of testing across controls entities and domains

• Maintain structured documentation of test procedures results and conclusions

Findings Assessment & Reporting

• Identify and document control gaps weaknesses and non-compliance againstlegal requirements

• Translate technical findings into clear concise business language with actionable recommendations

• Produce high-quality management reportsworking papers and summaries on control effectiveness and testing outcomes

• Track remediation actionsvalidateclosure and support retesting activities

Audit & Regulatory Readiness (First Line)

• Ensure audit-ready documentation for DOR-related controls (policies procedures evidence testing records)

• Support preparation for internal audit external audit and regulatory inspections

• Coordinatetimelyand structured responses to audit and regulatory requests

• Strengthen quality of control narratives andevidenceto meet regulatory expectations

• Contribute to lessons learned and continuous improvement post-assessments

Project & Stakeholder Management

• Coordinate testing plans timelines and dependencies across multiple stakeholders

• Engage with technology risk compliance and business teams tofacilitatetesting and remediation

• Provide structured updates to governance forums on progress risks and findings

• Escalate issues proactively with clear recommendations and mitigation options

Continuous Improvement

• Enhance control testingmethodology templates and quality standards aligned with DOR

• Promote best practices in evidence management traceability and documentation

• Identify opportunities to improve efficiency consistency and automation in testing and reporting

We are seeking professionals with:

• University degree in IT/Engineering/Science

• 58 years of experience in technology risk internal controls audit or compliance testing

• Proven experience in control testing and audit readiness in regulated environments

• Exposure to DORA (similar to Swift Oversight Law) operational resilience ICT risk or similar regulatory frameworks is highly desirable

• Understanding of technology risk domains (ITGCs resilience security outsourcing)

• Excellent attention to detail and commitment to high-quality deliverables

• Ability to…