Asset-Based Risk & Controls Analyst (Hybrid, Vienna)

System One; Merrifield (VA); Hybrid; USD 83,000 - 124,000; Part time

Job summary

System One in Vienna, VA is seeking a Risk Business Analyst (Contract) to support asset-based testing of IT and information security controls. The role involves planning, scoping, executing, and reporting testing activities within an Agile environment.

The analyst will conduct control assessments across all three lines of defense, communicate findings to stakeholders, and document work to meet IIA reperformance standards. Hybrid work arrangement in the Vienna area is expected.

Qualifications

• Bachelor's degree in business, information systems or related field.
• Experience in control testing and three lines of defense.
• Knowledge of FFIEC, NIST, ISO standards and security frameworks.
• Strong written and verbal communication, with senior stakeholder interaction.
• Ability to present findings clearly and concisely.

Responsibilities

• Planning & Scoping of Asset Based Assessments to include development of communications, risk & control matrices, scope documents and other supporting information
• Perform walk-throughs with business partners identifying actual versus expected controls
• Create test strategies to test actual controls
• Document all work performed to meet the IIA reperformance standard
• Document issues and final reports
• Present to leadership results of assessments
• Any other duties as assigned to support the program

Skills

Asset Based Testing

Agile Environment

Stakeholder Communication

Risk Assessment

Information Security

Analytical Thinking

Report Writing

Education

Bachelor's Degree in business / information systems

InfoSec Certifications (CISSP, CISA, CCSP, CRISC)

Job description

System One in Vienna, VA is seeking a Risk Business Analyst (Contract) to support asset-based testing of IT and information security controls. The role involves planning, scoping, executing, and reporting testing activities within an Agile environment.

The analyst will conduct control assessments across all three lines of defense, communicate findings to stakeholders, and document work to meet IIA reperformance standards. Hybrid work arrangement in the Vienna area is expected.