2LOD IT Risk & Control Analyst – Banking

CloudIngest; Charlotte (NC); Hybrid; USD 120,000 - 160,000; Full time

Job summary

CloudIngest is seeking an experienced IT Risk & Control Senior Analyst to join the Second Line of Defence (2LOD) Cybersecurity Risk function within a leading banking environment. The role emphasizes IT risk management, cybersecurity controls, control testing, regulatory compliance, and governance frameworks.

You will perform TOD, TOE, PRC assessments, control validations, risk reporting, and governance activities while partnering with cybersecurity, technology, audit, compliance, and business

Qualifications

• 9+ years in Information Security, Cybersecurity, IT Risk Management or Technology Risk
• 6+ years in Cybersecurity Operations, Incident Response, Control Testing, IT Risk or Security Investigations
• Strong experience with IT control audits, control validation, and testing methodologies
• Proven experience supporting Banking/Financial Services organizations
• Familiarity with NIST CSF, SOX Controls, IT Governance & Risk Management Frameworks
• Experience with PRC Reviews, Control Effectiveness Testing, Audit Remediation, Regulatory Compliance

Responsibilities

• Serve as a Second Line of Defence (2LOD) cybersecurity risk professional providing independent oversight of IT controls and risk management activities.
• Perform TOD and TOE reviews for cybersecurity and technology controls.
• Conduct PRC assessments and evaluate control maturity and effectiveness.
• Challenge and provide guidance to First Line of Defence (1LOD) control testing teams.
• Support internal audits, regulatory examinations, compliance reviews, and remediation activities.
• Analyze cybersecurity risks, vulnerabilities, threats, and control gaps to provide actionable insights.
• Develop risk reporting, dashboards, metrics, and governance documentation for leadership and regulators.
• Manage cybersecurity governance activities including risks, issues, actions, dependencies, decisions, and readiness tracking.
• Collaborate with Cybersecurity, Technology Risk, Compliance, Audit, and Business teams on risk initiatives.
• Stay updated on emerging cyber threats, regulatory expectations, and security trends.

Skills

IT risk mgmt

Cybersecurity controls

Control testing

Regulatory compliance

Governance frameworks

Communication

Tools

GRC Tools

Job description

CloudIngest is seeking an experienced IT Risk & Control Senior Analyst to join the Second Line of Defence (2LOD) Cybersecurity Risk function within a leading banking environment. The role emphasizes IT risk management, cybersecurity controls, control testing, regulatory compliance, and governance frameworks.

You will perform TOD, TOE, PRC assessments, control validations, risk reporting, and governance activities while partnering with cybersecurity, technology, audit, compliance, and business