In this role, you will be an essential member of the ATE Compliance Program, directly reporting to the Compliance Program Lead. Your primary responsibility will be to thoroughly understand compliance standards and assist teams in applying them correctly. This position focuses on validating the effectiveness of controls across ITGC, ISP, and QMS domains. You will conduct control testing, review evidence, facilitate audits, respond to inquiries, support escalations, and engage in discussions about control design to ensure compliance standards are understood and met. Additionally, you will assist with Quality Management System (QMS) testing for both global and territory-specific controls, including the collection and validation of audit evidence throughout the year. Collaboration is key, as you will work closely with IT product teams, security, risk management, QMS resource owners, and both internal and external auditors to ensure teams remain compliant and audit-ready.

Responsibilities

• Develop a comprehensive understanding of Information Security Policy (ISP) and Controls Standard, assisting product and technology teams in applying requirements to their environments.
• Test and validate ITGC controls across key domains including Access Controls, System Development and Change Management, Cyber Security and Data Protection, Service Management, and Resilience.
• Validate controls within:
  • Identity and access management: Ensure provisioning and de-provisioning, privileged access reviews, segregation of duties, and authentication mechanisms are functioning as required.
  • Change management: Verify that SDLC controls, change management procedures, emergency change processes, and application development security controls are designed and operating effectively.
  • Cyber security operations: Confirm that incident management, malware protection, vulnerability and patch management, encryption, certificate administration, and logging and monitoring controls meet ISP requirements.
  • Database and network controls: Ensure compliance of database configuration and administration, firewall configuration, and system performance monitoring.
  • Resilience: Validate that business continuity and disaster recovery plans are tested annually and that evidence supports compliance.
• Review and validate evidence of application penetration testing performed by independent third parties in accordance with ISP requirements, ensuring completeness for audit requests.
• Conduct compliance checks to assess adherence to ISP, controls, and relevant standards by reviewing vulnerability scans, security control validations, and other evidence.
• Document test results clearly and escalate deficiencies or areas of concern to the Compliance Program Lead with practical recommendations.
• Support control design discussions with product and technology teams to help them understand and meet ISP and ITGC requirements proactively.

Requirements

• Bachelor's degree in business, information technology, information security, risk management, or a related field.
• 2–4 years of experience in compliance, IT audit, ITGC testing, QMS testing, or risk management, preferably in a regulated IT or product environment.
• Strong understanding of SOC 2, ISO 27001, and 7216, with experience facilitating audits and validating evidence from preparation through remediation.
• Demonstrated experience validating ITGC controls, including access controls, change management, operations, SDLC, and resilience.
• Experience supporting or executing QMS control testing across global and territory-specific control frameworks.
• Working knowledge of information security policies and control frameworks, with the ability to interpret standards and validate compliance.
• Ability to identify and escalate compliance and operational risks within a portfolio context.

What We Offer

• Competitive salary and benefits package.
• Opportunities for professional growth and development.
• A collaborative work environment that values teamwork and innovation.

If you are passionate about compliance and want to make a significant impact on our organization, we encourage you to apply and join our team.