IT Control Tester (maternity cover)

At Moody's, we unite the brightest minds to turn today’s risks into tomorrow’s opportunities. We do this by striving to create an inclusive environment where everyone feels welcome to be who they are—with the freedom to exchange ideas, think innovatively, and listen to each other and customers in meaningful ways. Moody’s is transforming how the world sees risk. As a global leader in ratings and integrated risk assessment, we’re advancing AI to move from insight to action—enabling intelligence that not only understands complexity but responds to it. We decode risk to unlock opportunity, helping our clients navigate uncertainty with clarity, speed, and confidence.

If you are excited about this opportunity but do not meet every single requirement, please apply! You still may be a great fit for this role or other open roles. We are seeking candidates who model our values: invest in every relationship, lead with curiosity, champion diverse perspectives, turn inputs into actions, and uphold trust through integrity. 

Skills and Competencies

• Minimum of 3 years of experience in auditing (internal or external) or consulting
• Strong understanding of IT General Controls (ITGCs) and application controls
• Knowledge of information security principles and frameworks (e.g., ISO 27001, NIST) - desired
• Familiarity with audit lifecycle concepts: planning, walkthrough, fieldwork, reporting, and follow‑up
• Ability to analyze system configurations, logs, and control evidence
• Experience with audit documentation tools and structured workpaper standards
• Clear written and verbal communication, including the ability to explain technical topics to non technical audiences
• Ability to work independently and collaboratively in a global, matrixed environment
• Demonstrated proficiency in artificial intelligence concepts, with hands-on experience using AI tools to streamline workflows and enhance operational efficiency. Proven ability to implement AI-powered solutions to solve business challenges. Demonstrates a growing awareness of AI risk management and a commitment to responsible and ethical AI use. 

Education 

• Bachelor’s degree in information systems, Computer Science, Engineering, Accounting, or a related field

Preferred Certifications:

• Certified Information Systems Auditor (CISA)
• ISO 27001 Lead Auditor / Implementer (or equivalent)
• Other relevant certifications (e.g., CRISC, CISSP) are a plus
• Certified Internal Auditor (CIA)

Responsibilities

The IT Auditor is responsible for assessing the design and operating effectiveness of technology controls that support business processes, financial reporting, regulatory compliance, and information security. The role contributes to the Internal Audit plan by executing risk based IT audits, identifying control gaps, and providing practical, value adding recommendations to management, consistent with the Internal Audit lifecycle (planning, fieldwork, reporting, and follow up).

• Participate in engagement level IT risk assessments to identify key technology risks and control priorities
• Support audit scoping by understanding systems, applications, data flows, and supporting infrastructure
• Evaluate alignment with regulatory, security, and internal control requirements (e.g., ISO 27001)
• Perform walkthroughs and tests of IT general controls (ITGCs), application controls, and interface controls
• Execute control testing to identify potential control deficiencies in areas such as access management, change management, IT operations, data integrity, and cybersecurity
• Gather and document audit evidence in accordance with Internal Audit documentation standards and workpaper requirements
• Contribute to audit reports that translate technical issues into business relevant insights
• Communicate effectively with technology teams, business stakeholders, and audit management throughout the engagement lifecycle
• Track remediation of audit issues and validate the effectiveness of corrective actions
• Support ongoing monitoring and reporting of open observations
• Contribute to enhancements of audit methodology, tools, and data analytics capabilities

About the team

Our Control Testing team is responsible for leading and executing operational, and regulatory reporting control testing activities across the organization
The Regulatory Support and Controls (RSC) team in MIS Operations is responsible for the execution, support, remediation and controls of processes and enabling technology that support the end-to-end credit rating process and regulatory-mandated processes.   By joining our team, you will be part of exciting work in assessing the control environment of Moody’s Ratings globally.

#LI-Hybrid

Annual base salary gross: €43,000.00 to €68,800.00. Applicable to Lithuania candidates: The base salary range represents the low and high end of the Moody’s salary range for this position. Actual salaries will vary and will be based on various factors, such as candidate’s qualifications, skills, and competencies. The salary is one component of Moody’s total compensation package for employees. Other rewards and benefits include the following: Medical, Personal Accident, Life Insurance and Time Off.

Moody’s is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status, sexual orientation, gender expression, gender identity or any other characteristic protected by law.

Candidates for Moody's Corporation may be asked to disclose securities holdings pursuant to Moody’s Policy for Securities Trading and the requirements of the position. Employment is contingent upon compliance with the Policy, including remediation of positions in those holdings as necessary.