ABA Testing Analyst - 17567

Seneca Resources Company, LLC; Vienna (VA); Hybrid; USD 55,000 - 59,000; Full time

Job summary

Seneca Resources is seeking an ABA Testing Analyst to support Asset-Based Assessments and testing across IT and Information Security controls. The role is hybrid in Vienna, VA (3 days onsite per week) and contract-based.

The successful candidate will work in an Agile environment with stakeholders across the organization. Ideal candidates have 1–5 years in IT controls testing, IT audit, or cybersecurity risk, with familiarity in NIST, PCI DSS, and ISO/27001 frameworks.

Qualifications

• Experience in IT controls testing, IT audit, or cybersecurity risk.
• Knowledge of control testing within IT risk and GRC frameworks.
• Experience communicating findings in formal reports.

Responsibilities

• Plan and execute assessment activities across IT and info security controls.
• Develop test strategies and evidence review procedures.
• Document issues, risks, and observations clearly.
• Prepare assessment reports and present findings to leadership.
• Collaborate with stakeholders across multiple levels.
• Support regulatory and framework-based testing initiatives.
• Conduct research on information security controls and regulations.
• Assist with additional testing and risk/compliance initiatives.

Skills

IT controls testing

IT audit

information security risk

GRC

Agile environment

Communication skills

Education

Bachelor's degree or equivalent

Tools

Microsoft Word

Excel

Job description

ABA Testing Analyst – IT & Information Security Controls
Position Title: ABA Testing Analyst – IT & Information Security Controls
Location: Vienna, VA – Hybrid (3 days onsite per week)
Clearance Requirements: None specified
Position Status: Contract
Pay Rate: $40.00-$43.00/hour

Position Description

Seneca Resources is seeking an ABA Testing Analyst to support Asset-Based Assessment (ABA) and testing activities across IT and Information Security controls. This role is ideal for an early-to-mid-career professional with experience in IT audit, cybersecurity risk, controls testing, information security assessments, or governance, risk, and compliance (GRC).

The analyst will support the full assessment lifecycle, including planning and scoping, control walkthroughs, test strategy development, evidence review, issue documentation, reporting, and communication with business partners and leadership. The successful candidate will be comfortable working in an Agile environment and collaborating with stakeholders across multiple levels of an organization.

Key Responsibilities

• Plan and scope Asset-Based Assessments, including developing communications, risk and control matrices, scope documents, and supporting assessment materials.
• Conduct control walkthroughs with business partners to identify actual versus expected control activities.
• Develop and execute control testing strategies to evaluate the effectiveness of IT and Information Security controls.
• Review and document testing evidence and work performed in accordance with applicable Internal Audit reperformance standards.
• Identify, document, and communicate control deficiencies, issues, risks, and observations.
• Prepare clear and concise assessment reports and supporting documentation.
• Present assessment results, findings, and conclusions to leadership and key stakeholders.
• Collaborate with business partners, management, control owners, third parties, and other stakeholders throughout the assessment lifecycle.
• Conduct research and analysis related to information security controls, regulatory requirements, and industry frameworks.
• Support additional testing, risk, compliance, and information security initiatives as assigned.

Required Skills/Education

• 1-5 years of experience in IT controls testing, IT audit, information security risk, cybersecurity assessments, GRC, or a related field.
• Experience with control testing and/or one or more areas of the Three Lines of Defense, including Internal Audit, Enterprise Risk Management (ERM), or First Line functions.
• Experience supporting IT audits, information security risk assessments, or cybersecurity control assessments.
• Knowledge of information security regulations, standards, and frameworks, including:
  • NIST Cybersecurity Framework and NIST 800 Series
  • FFIEC
  • NCUA
  • GLBA
  • ISO 27001/27002
  • CIS/SANS controls
  • PCI DSS
• Strong understanding of IT and Information Security controls, risk management, compliance, and control assessment principles.
• Ability to work effectively with employees, management, business stakeholders, control owners, and third parties.
• Strong analytical, research, problem-solving, planning, and organizational skills.
• Excellent verbal and written communication skills, including technical writing and assessment reporting.
• Ability to present findings and recommendations clearly and concisely to leadership.
• Strong relationship-building skills, including the ability to establish trust, demonstrate diplomacy, and collaborate effectively.
• Proficiency with Microsoft Word, Excel, and other standard productivity tools.
• Bachelor's degree in Business, Information Systems, Cybersecurity, Information Technology, or a related field, or equivalent work/military experience.
• Relevant certifications such as CISA, CISSP, CCSP, CRISC, or other Information Security/GRC certifications are preferred.

Additional Requirement

• Maintain awareness of and comply with applicable organizational policies, procedures, and regulations related to the Bank Secrecy Act (BSA).

Work Authorization

Candidates must be authorized to work in the United States. Sponsorship is not available for this position.

Why This Opportunity?

This role offers an opportunity to build deeper expertise across IT controls testing, cybersecurity risk, information security compliance, audit, and GRC while working directly with business and technology stakeholders. Candidates who enjoy analyzing controls, identifying risks, communicating findings, and contributing to continuous improvement will be well positioned for success.

About Seneca Resources

At Seneca Resources, we are more than just a staffing and consulting firm, we are a trusted career partner. With offices across the U.S. and clients ranging from Fortune 500 companies to government organizations, we provide opportunities that help professionals grow their careers while making an impact.

When you work with Seneca, you’re choosing a company that invests in your success, celebrates your achievements, and connects you to meaningful work with leading organizations nationwide.

Our consultants and contractors enjoy competitive pay, comprehensive health, dental, and vision coverage, 401(k) retirement plans, and the support of a dedicated team who will advocate for you every step of the way.

Seneca Resources is proud to be an Equal Opportunity Employer, committed to fostering a diverse and inclusive workplace where all qualified individuals are encouraged to apply.