Hybrid Asset-Based Testing Analyst - InfoSec & IT Controls

BRMi; Vienna (VA); Hybrid; USD 80,000 - 91,000; Full time

Benefits offered by this job

Medical, Dental, Vision insurance

Life Insurance

Disability Insurance

401(k)

Paid Time Off

Educational Assistance

Job summary

BRMi in Vienna, VA seeks an Analyst to plan, scope, execute and report testing of IT and information security controls in an Agile environment. The role covers all assessment phases and coordination with partners, with a hybrid work arrangement in Vienna, VA.

The ideal candidate has experience in control testing and information security risk assessments, knowledge of NIST/ISO/FFIEC, and professional security certifications. This is a W2 fulltime role, offering comprehensive benefits.

Qualifications

• Experience in control testing across IT and information security.
• Experience in audit and information security risk assessments.
• Knowledge of FFIEC, NIST, ISO and related information security frameworks.
• Experience working with all levels of staff, management, stakeholders and third parties.
• Strong planning, analytical, and problem-solving skills.
• Excellent verbal and written communication skills.
• Bachelor's degree or equivalent in a related field; professional certifications preferred.
• BRMi will not sponsor applicants for work visas for this position.

Responsibilities

• Planning and scoping Asset Based Assessments, including communications, risk and control matrices, scope documents, and supporting information.
• Perform walk-throughs with business partners to identify actual vs. expected controls.
• Create test strategies to test actual controls.
• Document all work to meet IIA reperformance standards.
• Document issues and final reports; present assessment results to leadership.
• Perform other duties to support the program.

Skills

Control testing

Audit knowledge

Presentation skills

Stakeholder engagement

MS Office

Education

Bachelor's degree in business, information systems, or related field

CISSP/CISA/CCSP/CRISC certification

Job description

BRMi in Vienna, VA seeks an Analyst to plan, scope, execute and report testing of IT and information security controls in an Agile environment. The role covers all assessment phases and coordination with partners, with a hybrid work arrangement in Vienna, VA.

The ideal candidate has experience in control testing and information security risk assessments, knowledge of NIST/ISO/FFIEC, and professional security certifications. This is a W2 fulltime role, offering comprehensive benefits.