Asset-Based IT Controls Testing Analyst (Hybrid)

Brooklyn Arts Council; Vienna (VA); Hybrid; USD 80,000 - 91,000; Full time

Benefits offered by this job

Comprehensive Medical, Dental, and Vis

Employer-Paid Life Insurance

Employer-Paid Short-Term and Long-Term

401(k)

Paid Time Off (PTO) with Vacation, S

Educational Assistance

Job summary

BRMi in Vienna, VA is seeking an Asset Based Testing Analyst to plan, scope, execute, and report IT controls testing in an Agile environment.

Responsibilities include developing test strategies, walkthroughs with business partners, documenting work to IIA standards, and presenting results to leadership. The role requires experience in control testing and information security risk assessments.

Qualifications

• Experience in control testing across audit, ERM, or first line.
• Knowledge of FFIEC, NIST, ISO frameworks and related regulations.
• Ability to communicate findings clearly to leadership.
• Bachelor's degree or equivalent work/military experience.
• Certifications such as CISSP, CISA, CCSP, or CRISC are preferred.
• Experience with IT and information security controls.
• Strong analytical and problem-solving skills.

Responsibilities

• Planning and scoping asset-based assessments with risk/control matrices.
• Perform walkthroughs with partners to identify actual vs. expected controls.
• Create test strategies to test actual controls.
• Document work to meet IIA reperformance standards.
• Document issues and final reports.
• Present assessment results to leadership.
• Perform other duties to support the program.

Skills

Asset Based Testing

Risk assessment

Audit knowledge

Information security

Communication skills

Project planning

Documentation

Agile

Stakeholder management

Education

Bachelor’s degree in business, information systems, or related field; or equivalent

CISSP, CISA, CCSP, CRISC, or other information security certification

Job description

BRMi in Vienna, VA is seeking an Asset Based Testing Analyst to plan, scope, execute, and report IT controls testing in an Agile environment.

Responsibilities include developing test strategies, walkthroughs with business partners, documenting work to IIA standards, and presenting results to leadership. The role requires experience in control testing and information security risk assessments.