Controls Testing Analyst

Shuvel Digital; United States; Remote; USD 80,000 - 110,000; Full time

Job summary

A leading company is looking for a Controls Testing Analyst who will play a key role in planning and executing assessments of IT and Information Security controls. The ideal candidate will have experience in auditing, risk assessments, and relevant certifications. The role requires excellent communication and analytical skills, along with the ability to collaborate effectively with stakeholders across all levels.

Qualifications

• Experience in control testing in Audit, ERM, and First Line areas.
• Knowledge of regulations like NIST, ISO, and PCI DSS.
• CISSP, CISA, or other relevant Information Security certifications.

Responsibilities

• Plan and scope assessments for IT and Information Security controls.
• Document testing processes and report findings to leadership.
• Conduct walk-throughs with business partners and create test strategies.

Skills

Effective planning and organizational skills

Analytical skills

Problem solving skills

Strong verbal communication

Technical writing

Interpersonal communication

Research skills

Relationship building

Education

Bachelor Degree in business, information systems or related field

Tools

Microsoft Word

Spreadsheet software

Job description

Greetings!

Our client Navy Federal Credit Union is the world's largest credit union with over 10 million members, over $149 billion in assets, and over 23,000 employees.

Our client is seeking a Controls Testing Analyst-15578-Remote. You seem to have a rock-solid profile and your overall background seems to be a great match for the position.

Please review the below information for clarity on the position description.

Job Title: Analyst, Security Program Strategy Controls Assurance

Basic Purpose

The Analyst will serve in an Asset Based Testing role that will help plan, scope, execute, and report testing of IT and Information Security controls. The Analyst will be responsible for all phases of the assessment and communications with business partners and other stakeholders. They will work in an Agile environment.

Responsibilities

• Planning & Scoping of Asset Based Assessments to include development of communications, risk & control matrices, scope documents and other supporting information
• Perform walk-throughs with business partners identifying actual versus expected controls
• Create test strategies to test actual controls
• Document all work performed to meet the IIA reperformance standard
• Document issues and final reports
• Present to leadership results of assessments
• Any other duties as assigned to support the program

Qualifications

• Experience in control testing to include experience in some of the three lines of defense (Audit, ERM, First Line areas)
• Experience in audit and information security risk assessments
• Knowledge of applicable federal and state laws, rules and regulations (i.e. Federal Financial Institutions Examination Manual (FFIEC), National Information of Standards and Technology (NIST), and International Standards Organization (ISO)
• Knowledge of NCUA, FFIEC, GLBA, NIST (including the Cyber Security Framework and 800 Series), ISO 27001/27002, SANS/CIS 20, PCI DSS, and other Information Security requirements and frameworks
• Experience in working with all levels of staff, management, stakeholders, and third parties
• Effective planning and organizational skills
• Effective research, analytical and problem solving skills
• Strong verbal, written and interpersonal communication skills, including technical writing
• Bachelor Degree in business, information systems or related field or equivalent work/military experience
• CISSP, CISA, CCSP, CRISC or other Information Security certifications
• Ability to present findings and conclusions clearly and concisely
• Experience in working with all levels of staff, management, stakeholders, and third parties
• Ability to build effective relationships through rapport, trust, diplomacy, and tact
• Strong word processing and spreadsheet software skills

Bank Secrecy Section

Remains cognizant of and adheres to Navy Federal policies, procedures and regulations pertaining to the Bank Secrecy Act