Technical Risk Analyst

Technical Risk Analyst

Candidates must be local and work on site 3 days per week at one of the following locations

1. 820 Follin Lane SE Vienna VA 22180
2. 141 Security Drive Winchester Virginia 22602

*Please specify in your submittal which location they are for*

• 5 years of experience in IT Risk IT Audit Cybersecurity Risk IT Controls Testing or Information Security
• Strong experience performing control design and operating effectiveness testing within regulated environments
• Experience evaluating IAM controls including user access management privileged access access reviews and segregation of duties
• Ability to independently assess control effectiveness review evidence identify gaps and challenge first-line control owners
• Strong knowledge of ITGCs cybersecurity controls risk frameworks and assurance methodologies
• Experience documenting findings preparing testing reports and communicating risk insights to stakeholders
• Financial services banking or other highly regulated industry experience preferred

Technical Risk Analyst

A Fortune 50 financial services company is seeking a highly motivated Technical Risk Analyst for our client in the McLean Virginia area.

Overview:

• Seeking a Technical Risk Analyst to support second-line risk oversight through independent IT security controls testing and assurance activities.
• This role is responsible for evaluating the design and operating effectiveness of technology controls with a primary focus on Identity and Access Management (IAM) and cybersecurity controls.
• The successful candidate will possess strong analytical skills a deep understanding of risk and controls frameworks and the ability to deliver objective evidence-based assessments within a highly regulated environment.

Responsibilities:

• IT Controls Testing & Assurance
  • Perform independent testing of technology and cybersecurity controls to evaluate design and operating effectiveness
  • Execute control testing activities in accordance with established risk compliance and assurance methodologies
  • Review and assess control documentation process flows procedures and supporting evidence
  • Validate that controls are operating as intended and aligned with regulatory and organizational requirements
  • Document testing results observations and recommendations in a clear and concise manner
• Identity & Access Management (IAM) Risk Oversight
  • Evaluate IAM controls including user provisioning deprovisioning privileged access management access reviews segregation of duties and authentication controls
  • Assess compliance with IAM policies standards and procedures
  • Identify control gaps weaknesses and opportunities for improvement
  • Support ongoing monitoring and risk assessments related to access management processes
• Risk Assessment & Challenge Function
  • Provide independent challenge to first-line control owners regarding control design effectiveness and remediation activities
  • Analyze control deficiencies and assess associated risks and impacts
  • Evaluate management action plans and remediation efforts
  • Escalate significant findings and emerging risks as appropriate
• Reporting & Stakeholder Engagement
  • Prepare testing workpapers reports and risk assessments
  • Communicate findings and recommendations to business technology cybersecurity and risk stakeholders
  • Support internal audits regulatory examinations and governance activities
  • Partner with Risk Cybersecurity Compliance and Technology teams to strengthen the overall control environment

Qualifications:

• 5 years of experience in Technology Risk IT Audit IT Controls Testing Cybersecurity Risk Information Security or a related field
• Experience performing control design and operating effectiveness testing
• Experience evaluating IT General Controls (ITGCs) cybersecurity controls and risk management processes
• Strong knowledge of Identity and Access Management (IAM) controls and concepts
• Experience assessing control evidence documenting findings and preparing testing reports
• Understanding of risk and control frameworks including NIST COBIT ISO 27001 FFIEC or similar standards
• Experience working within highly regulated environments such as financial services banking healthcare or government
• Strong analytical problem-solving and critical thinking skills
• Excellent written and verbal communication skills
• Ability to independently challenge control owners and provide objective risk assessments