Risk and Controls Testing Specialist

About Our Team

The Institutional Services & Wealth Management (ISWM) Risk team serves as the First Line of Defense, partnering closely with business leaders to strengthen risk management practices and promote a culture of accountability, transparency, and continuous improvement. Within ISWM Risk, the Risk and Control Management team is responsible for identifying, assessing, monitoring, and mitigating risk through the evaluation of control design and operating effectiveness.

Our team plays a critical role in maintaining a strong and sustainable control environment that enables business growth, supports strategic objectives, and ensures compliance with regulatory expectations and enterprise risk management standards.

The Control Testing Analyst is a key contributor within the ISWM Risk & Control Management team and is responsible for executing a risk-based control testing program that evaluates the design and operating effectiveness of controls across Institutional Services and Wealth Management (ISWM). Reporting to the ISWM Control Testing Lead, this role partners closely with control/ process owners to assess control effectiveness, identify control gaps, and strengthen the overall risk and control environment.

The ideal candidate possesses hands‑on experience in control testing, control design assessments, operating effectiveness testing, Risk and Control Self‑Assessments (RCSA), and issue management. This individual must be highly organised, detail‑oriented, and capable of independently managing multiple testing engagements while effectively communicating results and recommendations to stakeholders.

• Control Testing Execution Plan, execute, and report on the business unit’s risk-based testing program in alignment with established policies, standards, and methodologies.
• Conduct end‑to‑end process and control walkthroughs with process and control owners to gain an in‑depth understanding of business processes, risks, and control activities.
• Develop testing plans, detailed scripts, and test cases that effectively assess control design and operating effectiveness.
• Request testing populations and select samples in accordance with established sampling methodologies and testing standards.
• Perform comprehensive control design effectiveness assessments and accurately complete required documentation and assessment templates.
• Execute control testing with a high degree of accuracy, completeness, and timeliness while maintaining adherence to established methodology.
• Provide oversight and direction for team testing activities, ensuring timely, consistent, and comprehensive execution in accordance with established quality standards, testing methodologies, documentation requirements, and regulatory expectations.
• Implement and maintain a strong quality review and challenge process to validate testing accuracy, completeness, and adherence to methodology.
• Complete control operating effectiveness assessments and supporting documentation in accordance with enterprise standards.
• Document testing results within Archer and maintain supporting evidence, including screenshots and testing artifacts, in designated SharePoint repositories.
• Evaluate control design and operating effectiveness, assess identified risks, and validate risk mitigation activities in accordance with M&T’s Risk & Control Policy, procedures, and standards.
• Communicate observations and findings clearly to management and stakeholders.
• Socialize testing results with process and control owners, facilitate discussions regarding observations and conclusions, and obtain appropriate approvals.
• Assist in drafting findings and action plans that address identified control weaknesses and enhance the overall control…