Asset Based Tester/Analyst

BRMi; Virginia; Remote; USD 85,000 - 91,000; Full time

Benefits offered by this job

Comprehensive Medical, Dental, Vision

Employer-Paid Life Insurance

Disability Insurance

401(k)

Paid Time Off with Holidays

Educational Assistance

Job summary

BRMi is seeking an Asset Based Tester/Analyst to support a large financial enterprise client. The role involves planning, scoping, executing, and reporting testing of IT and Information Security controls within an Agile environment.

Remote work is possible for multiple states, with some in-person interviews at customer HQ if required. Responsibilities include developing test strategies, conducting walkthroughs, documenting work to IIA standards, and presenting results to leadership.

Qualifications

• Experience in control testing across audit, ERM, or first-line roles.
• Experience in audit and information security risk assessments.
• Knowledge of FFIEC, NIST, ISO/IEC 27001/27002, SANS/CIS 20, PCI DSS.

Responsibilities

• Plan and scope Asset Based Assessments including communications and risk/control matrices.
• Perform walk-throughs with business partners to identify actual vs. expected controls.
• Create test strategies to test controls.
• Document work to meet IIA reperformance standards and final reports.
• Present assessment findings to leadership and stakeholders.
• Support program duties as assigned.

Skills

Control testing

Audit and risk assessments

Communication skills

Planning and organizing

Problem solving

Stakeholder collaboration

Findings presentation

Education

Bachelor degree in business or information systems or related field

Certifications: CISSP, CISA, CCSP, CRISC

Job description

Overview

BRMi is seeking an Asset Based Tester/Analyst to support a large financial enterprise client.

The Analyst will serve in an Asset Based Testing role that will help plan, scope, execute, and report testing of IT and Information Security controls. The Analyst will be responsible for all phases of the assessment and communications with business partners and other stakeholders. They will work in an Agile environment.

Benefits:

• Comprehensive Medical, Dental, and Vision Insurance
• Employer-Paid Life Insurance
• Employer-Paid Short-Term and Long-Term Disability Insurance
• 401(k)
• Paid Time Off (PTO) that includes Vacation Leave, Sick Leave, and 11 Paid Holidays
• Educational Assistance

Salary: $85-91K

Can be 100% remote in WV, VA, MD, DC, or FL

High Profile roles may require candidates to fly to customer HQ for in person interview (expenses paid)

Responsibilities

• Planning & Scoping of Asset Based Assessments to include development of communications, risk & control matrices, scope documents and other supporting information
• Perform walk-throughs with business partners identifying actual versus expected controls
• Create test strategies to test actual controls
• Document all work performed to meet the IIA reperformance standard
• Document issues and final reports
• Present to leadership results of assessments
• Any other duties as assigned to support the program

Qualifications

• Experience in control testing to include experience in some of the three lines of defense (Audit, ERM, First Line areas)
• Experience in audit and information security risk assessments
• Knowledge of applicable federal and state laws, rules and regulations (i.e. Federal Financial Institutions Examination Manual (FFIEC), National Information of Standards and Technology (NIST), and International Standards Organization (ISO)
• Knowledge of NCUA, FFIEC, GLBA, NIST (including the Cyber Security Framework and 800 Series), ISO 27001/27002, SANS/CIS 20, PCI DSS, and other Information Security requirements and frameworks
• Experience in working with all levels of staff, management, stakeholders, and third parties
• Effective planning and organizational skills
• Effective research, analytical and problem solving skills
• Strong verbal, written and interpersonal communication skills, including technical writing
• Bachelor Degree in business, information systems or related field or equivalent work/military experience
• CISSP, CISA, CCSP, CRISC or other Information Security certifications
• Ability to present findings and conclusions clearly and concisely
• Experience in working with all levels of staff, management, stakeholders, and third parties
• Ability to build effective relationships through rapport, trust, diplomacy, and tact
• Strong word processing and spreadsheet software skillsBank

BRMi will not sponsor applicants for work visas for this position.

This is a W2 opportunity only

EOE/Minorities/Females/Vet/Disabled

We are an equal opportunity employer that values diversity and commitment at all levels. All individuals, regardless of personal characteristics, are encouraged to apply. Employment policies and decisions on employment and promotion are based on merit, qualifications, performance, and business needs. The decisions and criteria governing the employment relationship with all employees are made in a nondiscriminatory manner, without regard to race, religion, color, national origin, sex, age, marital status, physical or mental disability, medical condition, veteran status, or any other factor determined to be unlawful by federal, state, or local statutes.