Asset Based Testing Analyst (Hybrid)

BRMi; Vienna (VA); Hybrid; USD 80,000 - 91,000; Full time

Benefits offered by this job

Medical, Dental, Vision insurance

Life Insurance

Disability Insurance

401(k)

Paid Time Off

Educational Assistance

Job summary

BRMi in Vienna, VA seeks an Analyst to plan, scope, execute and report testing of IT and information security controls in an Agile environment. The role covers all assessment phases and coordination with partners, with a hybrid work arrangement in Vienna, VA.

The ideal candidate has experience in control testing and information security risk assessments, knowledge of NIST/ISO/FFIEC, and professional security certifications. This is a W2 fulltime role, offering comprehensive benefits.

Qualifications

• Experience in control testing across IT and information security.
• Experience in audit and information security risk assessments.
• Knowledge of FFIEC, NIST, ISO and related information security frameworks.
• Experience working with all levels of staff, management, stakeholders and third parties.
• Strong planning, analytical, and problem-solving skills.
• Excellent verbal and written communication skills.
• Bachelor's degree or equivalent in a related field; professional certifications preferred.
• BRMi will not sponsor applicants for work visas for this position.

Responsibilities

• Planning and scoping Asset Based Assessments, including communications, risk and control matrices, scope documents, and supporting information.
• Perform walk-throughs with business partners to identify actual vs. expected controls.
• Create test strategies to test actual controls.
• Document all work to meet IIA reperformance standards.
• Document issues and final reports; present assessment results to leadership.
• Perform other duties to support the program.

Skills

Control testing

Audit knowledge

Presentation skills

Stakeholder engagement

MS Office

Education

Bachelor's degree in business, information systems, or related field

CISSP/CISA/CCSP/CRISC certification

Job description

Overview

The Analyst will serve in an Asset Based Testing role that will help plan, scope, execute, and report testing of IT and Information Security controls. The Analyst will be responsible for all phases of the assessment and communications with business partners and other stakeholders. They will work in an Agile environment.

Benefits

• Comprehensive Medical, Dental, and Vision Insurance
• Employer-Paid Life Insurance
• Employer-Paid Short-Term and Long-Term Disability Insurance
• 401(k)
• Paid Time Off (PTO) that includes Vacation Leave, Sick Leave, and 11 Paid Holidays
• Educational Assistance

Salary: 80k-91k

Hybrid in Vienna, VA

• An In Person interview will be required for this role

Responsibilities

• Planning and scoping of Asset Based Assessments, including development of communications, risk and control matrices, scope documents, and other supporting information
• Perform walk-throughs with business partners to identify actual versus expected controls
• Create test strategies to test actual controls
• Document all work performed to meet the IIA reperformance standard
• Document issues and final reports
• Present assessment results to leadership
• Perform other duties as assigned to support the program

Qualifications

• Experience in control testing, including experience in one or more of the three lines of defense (Audit, ERM, First Line areas)
• Experience in audit and information security risk assessments
• Knowledge of applicable federal and state laws, rules, and regulations, including FFIEC, NIST, and ISO
• Knowledge of NCUA, FFIEC, GLBA, NIST (including the Cybersecurity Framework and 800 Series), ISO 27001/27002, SANS/CIS 20, PCI DSS, and other information security requirements and frameworks
• Experience working with all levels of staff, management, stakeholders, and third parties
• Effective planning and organizational skills
• Effective research, analytical, and problem-solving skills
• Strong verbal, written, and interpersonal communication skills, including technical writing
• Bachelor's degree in business, information systems, or a related field, or equivalent work/military experience
• CISSP, CISA, CCSP, CRISC, or other Information Security certification
• Ability to present findings and conclusions clearly and concisely
• Ability to build effective relationships through rapport, trust, diplomacy, and tact
• Strong word processing and spreadsheet software skills
• BRMi will not sponsor applicants for work visas for this position.
• This is a W2 opportunity only

EOE/Minorities/Females/Vet/Disabled

We are an equal opportunity employer that values diversity and commitment at all levels. All individuals, regardless of personal characteristics, are encouraged to apply. Employment policies and decisions on employment and promotion are based on merit, qualifications, performance, and business needs. The decisions and criteria governing the employment relationship with all employees are made in a nondiscriminatory manner, without regard to race, religion, color, national origin, sex, age, marital status, physical or mental disability, medical condition, veteran status, or any other factor determined to be unlawful by federal, state, or local statutes.