Analyst, Security Program Strategy Controls Assurance

INSPYR Solutions; Vienna (VA); Hybrid; USD 55,000 - 66,000; Full time

Benefits offered by this job

Comprehensive medical benefits

Competitive pay

401(k) retirement plan

…and much more!

Job summary

INSPYR Solutions is seeking an Analyst, Security Program Strategy Controls Assurance in Vienna, VA. The role supports planning, scoping, executing, and reporting IT and information security control testing within an Agile environment.

The candidate will collaborate with business partners and stakeholders, perform risk and control assessments, and communicate findings to leadership. A CISSP/CISA/CCSP/CRISC certification set and a bachelor’s degree or equivalent is preferred.

Qualifications

• Experience in control testing across the three lines of defense (Audit, ERM, First Line).
• Experience in audit and information security risk assessments.
• Knowledge of FFIEC, NIST, ISO security standards and frameworks.
• Familiarity with NCUA, FFIEC, GLBA, NIST 800-series, ISO 27001/27002, SANS/CIS 20, PCI DSS.

Responsibilities

• Plan and scope Asset Based Assessments; develop communications and risk matrices.
• Perform walk-throughs with business partners to identify actual vs. expected controls.
• Create test strategies to validate controls and document findings.
• Document work per IIA reperformance standards and prepare final reports.
• Present assessment results to leadership and stakeholders.

Skills

Planning

Risk assessment

Strong communication

Analytical skills

Problem solving

Stakeholder management

Education

Bachelor's degree or equivalent in business/info systems

CISSP

CISA

CCSP

CRISC

Job description

Title: Analyst, Security Program Strategy Controls Assurance
Location: Vienna, VA (HYBRID)
Duration: Initial 6-month contract with possible extensions
Compensation:$40/hour - $48/hour
Work Requirements: US Citizen, GC Holders or Authorized to Work in the U.S.

Analyst, Security Program Strategy Controls Assurance

Basic Purpose

The Analyst will serve in an Asset Based Testing role that will help plan, scope, execute, and report testing of IT and Information Security controls. The Analyst will be responsible for all phases of the assessment and communications with business partners and other stakeholders. They will work in an Agile environment.

Responsibilities

• Planning & Scoping of Asset Based Assessments to include development of communications, risk & control matrices, scope documents and other supporting information
• Perform walk-throughs with business partners identifying actual versus expected controls
• Create test strategies to test actual controls
• Document all work performed to meet the IIA reperformance standard
• Document issues and final reports
• Present to leadership results of assessments
• Any other duties as assigned to support the program

Qualifications

• Experience in control testing to include experience in some of the three lines of defense (Audit, ERM, First Line areas)
• Experience in audit and information security risk assessments
• Knowledge of applicable federal and state laws, rules and regulations (i.e. Federal Financial Institutions Examination Manual (FFIEC), National Information of Standards and Technology (NIST), and International Standards Organization (ISO)
• Knowledge of NCUA, FFIEC, GLBA, NIST (including the Cyber Security Framework and 800 Series), ISO 27001/27002, SANS/CIS 20, PCI DSS, and other Information Security requirements and frameworks
• Experience in working with all levels of staff, management, stakeholders, and third parties
• Effective planning and organizational skills
• Effective research, analytical and problem solving skills
• Strong verbal, written and interpersonal communication skills, including technical writing
• Bachelor Degree in business, information systems or related field or equivalent work/military experience
• CISSP, CISA, CCSP, CRISC or other Information Security certifications
• Ability to present findings and conclusions clearly and concisely
• Experience in working with all levels of staff, management, stakeholders, and third parties
• Ability to build effective relationships through rapport, trust, diplomacy, and tact
• Strong word processing and spreadsheet software skills

Our benefits package includes:

• Comprehensive medical benefits
• Competitive pay
• 401(k) retirement plan
• …and much more!

About INSPYR Solutions

Technology is our focus and quality is our commitment. As a national expert in delivering flexible technology and talent solutions, we strategically align industry and technical expertise with our clients’ business objectives and cultural needs. Our solutions are tailored to each client and include a wide variety of professional services, project, and talent solutions. By always striving for excellence and focusing on the human aspect of our business, we work seamlessly with our talent and clients to match the right solutions to the right opportunities. Learn more about us at inspyrsolutions.com.

INSPYR Solutions provides Equal Employment Opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, or genetics. In addition to federal law requirements, INSPYR Solutions complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities.

INSPYR Solutions provides Equal Employment Opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, genetics, or any other protected status. INSPYR Solutions complies with all applicable laws governing nondiscrimination in employment in every location in which the company has facilities.

Applicants requiring reasonable accommodation during the application or interview process should contact [e-mail] for assistance.

Information collected and processed through your application with INSPYR Solutions (including any job applications you choose to submit) is subject to INSPYR Solutions' Privacy Policy and INSPYR Solutions' AI and Automated Employment Decision Tool Policy: https://www.inspyrsolutions.com/policies/. By submitting an application, you are consenting to being contacted by INSPYR Solutions through phone, email, or text.