Bachelor’s degree in Computer Science, Information Systems, Engineering, or related field
8+ years in software testing/QE, test governance, or QA leadership in regulated financial services
Responsibilities
Own and enforce SDAM testing controls across programs/releases covering test requirements analysis, strategy/plan approvals, production-separate and production-equivalent environments, application security testing, and data protection in non-prod
Define and operate practical stage gates and tollgates for testing artifacts (Test Strategy, Test Plan, Traceability, Execution Results, Defect reports, Test Summary, Post-Implementation Validation) with clear acceptance criteria and approvals
Serve as the primary point of contact for QE/testing compliance matters; conduct self-assessments and targeted audits; manage exceptions with documented mitigations; partner with 1LOD/2LOD to meet ECM and enterprise risk expectations
Support remediation of supervisory observations (e.g., MRIA/MRA) by tightening test oversight, documentation completeness, and release governance for Tier-1 programs
Lead the uplift of testing governance processes, playbooks, and templates; standardize how teams plan, execute, and evidence testing in ADO / ServiceNow Test Management Module (TMM); drive adoption through pilots and iterative rollout
Facilitate governance forums, CAB support, and decision-making meetings; curate artifact checklists and ensure readiness against ECM expectations and required templates (e.g., Impact Analysis, Risk Registry, Test Strategy/Plan)
Develop and deliver training, clinics, and office hours for engineering, product, and program teams on SDLC testing governance, evidencing, and SDAM alignment
Build trusted relationships with product owners, architects, development, QE, change/release, and risk/audit partners; act as a liaison across IT, compliance, audit, and business to ensure cohesive execution and a culture of accountability
Define and track KPIs/OKRs for testing governance (e.g., artifact completeness, traceability coverage, defect leakage, automation coverage, environment parity, audit issue closure); publish dashboards and executive-ready reporting
Perform gap assessments and retrospectives across audits, and major releases; integrate lessons learned to mature controls, tooling, and workflows (including risk-based testing and exception paths)