• Support the Internal Control function in executing second-line-of-defense (LOD2) activities across the organization.
• Perform design and operating effectiveness testing of key controls.
• Review and analyze control evidence provided by control owners.
• Conduct walkthroughs with LOD1 control owners to understand processes and validate control execution.
• Document testing results, findings, and recommendations.
• Prepare testing reports and support the follow-up of remediation actions.
• Support the maintenance and continuous improvement of the Internal Control Framework.
• Prepare reporting materials for management and governance committees.
• Engage with stakeholders across business and support functions to facilitate control testing activities.

• Experience in Internal Controls, Internal Audit, Risk Management, Compliance, Information Security, or External Audit.
• Strong understanding of internal control frameworks and governance principles (e.g., COSO).
• Experience assessing and testing controls against recognized frameworks and regulations, such as ISO 27001, ISO 22301, NIST Cybersecurity Framework, CIS Controls, DORA, NIS2, or similar.
• Hands-on experience with control testing, evidence review, walkthroughs, and report drafting.
• Strong analytical and problem-solving skills with attention to detail.
• Excellent communication and stakeholder management skills.
• Ability to work collaboratively across business and support functions in a governance and control environment.

The Devoteam Group works for equal opportunities, promoting its employees based on merit and actively fights against all forms of discrimination. We are convinced that diversity contributes to the creativity, dynamism and excellence of our organization. All of our vacancies are open to people with disabilities.