Description

About The Company:

WTW (NASDAQ: WTW) is in the business of people, risk and capital. With roots dating to 1828, our company has over 45,000 colleagues serving more than 140 countries and markets. Our values – client focus, teamwork, integrity, respect and excellence – underlie all that we do, including how we behave and interact with each other. They are part of our WTW DNA. We design and deliver solutions that manage risk, optimize benefits, cultivate talent, and expand the power of capital to protect and strengthen institutions and individuals. Our unique perspective allows us to see the critical intersections between talent, assets, and ideas — the dynamic formula that drives business performance. Together, we unlock potential. We are located on the internet at wtwco.com

About the team:

The Information Security (InfoSec) team is responsible for protecting the organization's information, systems, and data from security threats. The team delivers security services that help identify, prevent, detect, and respond to cyber risks while supporting business and regulatory requirements.

The Role:

Perform controls testing across On-Premise and Cloud environments, assessing Control Design Adequacy and Control Operating Effectiveness.
Demonstrate knowledge of audit and compliance frameworks such as Sarbanes–Oxley Act Section 404 (SOX 404), SOC 2, SSAE 18, and New York Department of Financial Services Cybersecurity Regulation (NYDFS).
Establish and maintain processes and procedures for control testing across diverse IT environments.
Conduct control walkthroughs with system owners, engineers, architects, and business stakeholders to validate control processes and requirements.
Gather audit evidence, perform testing, and document results in accordance with organizational standards.
Adapt quickly to new domains and complex assessment activities while ensuring high-quality testing execution.
Lead assigned projects independently, ensuring end-to-end ownership and timely delivery.
Support team members through knowledge sharing, guidance, and collaboration.
Identify, report, and track control gaps across on-prem and cloud environments, including ineffective or inadequate controls.
Assess risk impact and severity associated with identified control deficiencies.
Recommend improvements to control design and implementation to strengthen security and compliance posture.
Support control owners in designing, implementing, and maintaining controls and documentation.
Prepare comprehensive control testing reports including issue descriptions, evidence analysis, and recommendations.
Perform additional tasks and responsibilities assigned by management.
Stay updated with evolving information security regulations, standards, and industry best practices.

Qualifications

Educated to degree level or equivalent
7-8 years’ experience with IT and technology controls/audit related engagements
Experience of working within a Global Financial organization
Problem Solving
Delivery focused
Strong communications and stakeholder management
The Application Process
Stage 1: Online application and recruiter review
Stage 2: Pre-recorded video interview
Stage 3: Live video or in person interview with hiring manager and team
Stage 4: Offer and onboarding

We’re committed to equal employment opportunity and provide application, interview and workplace adjustments and accommodations to all applicants. If you foresee any barriers, from the application process through to joining WTW, please email candidatehelpdesk@wtwco.com.

Contacto no solicitado

Cualquier currículum o perfil de candidato no solicitado enviado a través de nuestro sitio web o a las cuentas de correo electrónico personales de los empleados de Willis Towers Watson se considera propiedad de Willis Towers Watson y no está sujeto al pago de honorarios de agencia. Para ser una agencia de reclutamiento/empresa de búsqueda autorizada por Willis Towers Watson, dicha agencia debe tener un acuerdo escrito formal existente firmado por un reclutador autorizado de Willis Towers Watson y una relación de trabajo activa con la organización. Los currículums deben enviarse de acuerdo con nuestro proceso de presentación de candidatos, que incluye participar activamente en la búsqueda particular. Asimismo, para nuestras agencias de reclutamiento/empresas de búsqueda autorizadas, si no se sigue el proceso de presentación de candidatos, Willis Towers Watson no pagará honorarios de agencia. Willis Towers Watson es un empleador que ofrece igualdad de oportunidades. Si desea que guardemos su información de contacto para considerarla en el futuro, envíe un correo electrónico a: Agency.inquiries@willistowerswatson.com .

Nuestras oficinas

Nuestros colegas prestan servicios en más de 140 países y mercados en todo el mundo. Esto le da una dimensión global a todo lo que hacemos y crea muchas oportunidades interesantes para colaborar y crecer. Explore el mapa a continuación para ver a dónde podría llevarlo su carrera.

Control Resilience Assessor