Asset-Based IT Controls Testing Analyst | Hybrid

System One, Inc.; Vienna (VA); Hybrid; USD 62,000 - 66,000; Part time

Benefits offered by this job

Health benefits

401(k) plan

Job summary

System One, Inc. in Vienna, VA seeks an Analyst to plan, scope, execute, and report testing of IT and Information Security controls within an Agile environment. The role covers Asset Based Assessments and communications with business partners across all phases of the assessment.

The position requires experience in control testing, audit and information security risk assessments, and knowledge of FFIEC, NIST, and ISO frameworks. It offers a hybrid work model with 3 days onsite and 2 days remote.

Qualifications

• Experience in control testing across the three lines of defense (Audit, ERM, First Line)
• Experience in audit and information security risk assessments
• Knowledge of FFIEC, NIST, ISO frameworks
• Knowledge of NCUA, FFIEC, GLBA, NIST 800 Series, ISO 27001/27002, SANS/CIS 20, PCI DSS and other Information Security requirements

Responsibilities

• The Analyst will serve in an Asset Based Testing role that will help plan, scope, execute, and report testing of IT and Information Security controls.
• The Analyst will be responsible for all phases of the assessment and communications with business partners and other stakeholders.
• They will work in an Agile environment.
• Planning & Scoping of Asset Based Assessments to include development of communications, risk & control matrices, scope documents and other supporting information
• Perform walk-throughs with business partners identifying actual versus expected controls
• Create test strategies to test actual controls
• Document all work performed to meet the IIA reperformance standard
• Document issues and final reports
• Present to leadership results of assessments
• Any other duties as assigned to support the program

Skills

Analytical skills

Communication skills

Planning & organizational skills

Problem solving

Interpersonal skills

Technical writing

Education

Bachelor Degree in business, information systems or related field

CISSP

CISA

CCSP

CRISC

Job description

System One, Inc. in Vienna, VA seeks an Analyst to plan, scope, execute, and report testing of IT and Information Security controls within an Agile environment. The role covers Asset Based Assessments and communications with business partners across all phases of the assessment.

The position requires experience in control testing, audit and information security risk assessments, and knowledge of FFIEC, NIST, and ISO frameworks. It offers a hybrid work model with 3 days onsite and 2 days remote.