Controls Analyst

Controls Analyst

Gurugram, India

Apply now

Responsibilities

• Execute end-to-end control assessments, including planning, walkthroughs, evidence reviews, testing, issue validation, and reporting activities.
• Conduct AI risk assessments for AI tools, AI-enabled applications, agents, connectors, plugins, and model-driven solutions to evaluate governance, security, data exposure, autonomy, and oversight controls
• Analyze vendor assurance documentation, including SOC reports, ISO certifications, trust-center materials, security documentation, and technical architecture evidence to assess risk and compliance posture
• Develop and review Risk and Control Self-Assessments (RCSAs), documenting risk statements, control mappings, effectiveness evaluations, evidence-based conclusions, and residual risk assessments
• Support ISO/IEC 27001:2022 readiness reviews, internal audits, and continuous control monitoring activities by evaluating policies, procedures, technical configurations, and operational evidence
• Prepare clear and actionable assessment reports, identifying findings, risks, observations, and improvement opportunities supported by appropriate evidence and recommendations
• Partner with control owners, product teams, technology teams, and risk stakeholders to facilitate assessments, communicate outcomes, and drive remediation efforts and maintain accurate assessment documentation, workpapers, issue logs, evidence repositories, and governance reporting within approved GRC and collaboration platforms
• Leverage data analytics, automation, and approved AI tools to enhance assessment efficiency, reporting quality, consistency, and operational effectiveness and stay informed on emerging developments in AI, cybersecurity, regulatory requirements, and risk management practices, translating insights into practical control assessment approaches

About the Team

Our Internal Controls team plays a critical role in strengthening Moody’s control environment by evaluating and enhancing the effectiveness of controls that mitigate financial, cybersecurity, operational, and emerging technology risks. We partner with stakeholders across the organization to drive compliance, resilience, and continuous improvement through a disciplined and risk-focused approach. As part of this team, you will have the opportunity to work on innovative AI governance and risk initiatives, collaborate with global teams, and contribute to the development of a robust control framework that supports Moody’s strategic objectives. This role offers strong exposure to emerging technologies, ongoing professional development, and the opportunity to make a meaningful impact in a rapidly evolving risk landscape.