IT Control Testing Senior Analyst

Texas Capital Bank; United States; On-site; USD 100,000 - 160,000; Full time

Benefits offered by this job

Health insurance

Wellness program

Fertility and family building aids

Life and disability insurance

401K match retirement savings

Paid leave

Paid holidays

PTO

Job summary

Texas Capital Bank is seeking an IT Control Testing Senior Analyst to perform risk-based assessments of technology and cybersecurity controls within the Second Line of Defense. You will evaluate ITGCs, ITACs, automated and cybersecurity controls while partnering with Technology, Information Security, Operational Risk, Compliance, and Internal Audit.

The role requires strong analytical and communication skills, deep knowledge of regulatory guidance (NIST, COBIT, COSO, FFIEC, SOX) and experience

Qualifications

• Minimum 5 years of experience in technology risk management, IT audit, controls testing, cybersecurity risk, or related fields.
• Experience performing independent testing of ITGCs, ITACs, automated controls and cybersecurity controls.
• Strong knowledge of NIST CSF, COBIT, COSO, FFIEC guidance and SOX IT control principles.
• Experience testing controls related to Access Management, Change Management, SDLC, Technology Operations, Data Governance or Cloud.
• Excellent analytical, communication and executive reporting skills.
• Banking or financial services experience preferred.
• Certifications: CISA, CRISC, CISSP, CISM, or CIA preferred.
• Experience with Archer, ServiceNow, Power BI, or similar tools.

Responsibilities

• Evaluate industry standards, regulatory mandates and legal requirements relevant to technology and information security.
• Execute independent testing of ITGCs, ITACs, automated controls, and cybersecurity controls.
• Prepare testing reports, risk assessments, management summaries, and executive reporting.
• Ensure testing activities align with NIST, COBIT, COSO, FFIEC guidance, SOX expectations and internal risk frameworks.
• Enhance testing methodologies, reporting capabilities, standards and quality assurance practices.
• Provide independent oversight and effective challenge to First Line of Defense stakeholders.
• Review management action plans, validate corrective actions and ensure remediation addresses root causes.

Skills

Analytical thinking

Communication

Executive reporting

Risk assessment

Regulatory knowledge

Education

Bachelor’s degree in IT/Cybersecurity or related discipline

Certifications: CISA, CRISC, CISSP, CISM, or CIA preferred

Tools

Archer

ServiceNow

Power BI

Job description

Texas Capital is built to help businesses and their leaders. Our depth of knowledge and expertise allows us to bring the best of the big banks at a scale that makes sense for our clients, with highly experienced bankers who truly invest in people’s success — today and tomorrow. While we are rooted in core financial products, we are differentiated by our approach. Our bankers are seasoned financial experts who possess deep experience across a multitude of industries. Equally important, they bring commitment — investing the time and resources to understand our clients’ immediate needs, identify market opportunities and meet long-term objectives. At Texas Capital, we build long lasting relationships.

Texas Capital provides a variety of benefits to colleagues, including health insurance coverage, wellness program, fertility and family building aids, life and disability insurance, retirement savings plans with a generous 401K match, paid leave programs, paid holidays, and paid time off (PTO).

• health insurance coverage
• wellness program
• fertility and family building aids
• life and disability insurance
• retirement savings plans with a generous 401K match
• paid leave programs
• paid holidays
• paid time off (PTO)

Headquartered in Dallas with offices in Austin, Fort Worth, Houston, Richardson, Plano and San Antonio, Texas Capital was recently named Best Regional Bank in 2024 by Bankrate and was named to The Dallas Morning News’ Dallas-Fort Worth metroplex Top Workplaces 2023 and GoBankingRate’s 2023 list of Best Regional Banks.

For more information about joining our team, please visit us at www.texascapitalbank.com.

Job Description

The IT Control Testing Senior Analyst is responsible for executing independent risk-based assessments of technology and cybersecurity controls within the Second Line of Defense (2LOD). This role evaluates the design and operating effectiveness of key technology controls, including IT General Controls (ITGCs), IT Application Controls (ITACs), automated controls, and cybersecurity controls, and assesses the associated risk implications of control deficiencies. The role partners closely with Technology, Information Security, Operational Risk, Compliance, and Internal Audit stakeholders to strengthen the organization’s risk and control environment.

Responsibilities

IT Regulatory Compliance & Alignment

Evaluate industry standards, regulatory mandates, and legal requirements relevant to technology and information security. Ensure organizational policies, procedures, and frameworks are aligned with these requirements, proactively identifying changes in the regulatory landscape and recommending adaptations as needed.

Technology Control Testing & Assurance

Execute independent testing of ITGCs, ITACs, automated controls, and cybersecurity controls. Assess control design and operating effectiveness, develop testing procedures, sampling approaches, document conclusions, and perform remediation validation and issue closure testing.

• Reporting & Risk Communication: Prepare testing reports, risk assessments, management summaries, and executive reporting. Clearly articulate risk implications and recommendations to stakeholders and governance committees.
• Regulatory, Audit & Framework Alignment: Ensure testing activities align with NIST, COBIT, COSO, FFIEC guidance, SOX expectations, and internal risk management frameworks.
• Continuous Improvement: Enhance testing methodologies, reporting capabilities, standards, and quality assurance practices to improve technology risk management maturity.

Technology Risk Assessment & Analysis

Evaluate control effectiveness in mitigating technology, cyber, operational, regulatory, and data risks. Assess deficiencies for severity, root cause, residual risk exposure, and business impact. Identify emerging risks and systemic control weaknesses.

Second Line of Defense Oversight & Challenge

Provide independent oversight and effective challenge to First Line of Defense stakeholders regarding control design, implementation, testing results, remediation plans, and risk treatment decisions.

Issue Management & Remediation Oversight

Review management action plans, validate corrective actions, challenge closure requests when evidence is insufficient, and ensure remediation addresses root causes and risk exposure.

Qualifications

• Minimum 5 years of experience in Technology Risk Management, IT Audit, Controls Testing, Cyber Risk Management, Operational Risk, or Technology Compliance within a regulated environment.
• Bachelor’s degree in information technology, Information Systems, Cybersecurity, Business, Accounting, or related discipline.
• Demonstrated experience performing independent testing of ITGCs, ITACs, automated controls, and cybersecurity controls.
• Strong knowledge of NIST CSF, COBIT, COSO, FFIEC guidance, and SOX IT control principles.
• Experience assessing control deficiencies, residual risk, and business impacts.
• Experience testing controls related to Access Management, Change Management, SDLC, Technology Operations, Application Security, Data Governance, or Cloud Technologies.
• Strong analytical, critical thinking, communication, and executive reporting skills.
• Banking or financial services experience preferred.
• CISA, CRISC, CISSP, CISM, or CIA certifications preferred.
• Experience with Archer, ServiceNow, Power BI, or similar preferred tools.

The duties listed above are the essential functions, or fundamental duties within the job classification. The essential functions of individual positions within the classification may differ. Texas Capital Bank may assign reasonably related additional duties to individual employees consistent with standard departmental policy.

Texas Capital is an Equal Opportunity Employer.

Texas Capital is built to help businesses and their leaders. Our depth of knowledge and expertise allows us to bring the best of the big banks at a scale that makes sense for our clients, with highly experienced bankers who truly invest in people’s success — today and tomorrow. While we are rooted in core financial products, we are differentiated by our approach. Our bankers are seasoned financial experts who possess deep experience across a multitude of industries. Equally important, they bring commitment — investing the time and resources to understand our clients’ immediate needs, identify market opportunities and meet long-term objectives. At Texas Capital, we do more than build business success. We build long lasting relationships. Headquartered in Dallas with offices in Austin, Fort Worth, Houston, Richardson, Plano and San Antonio, Texas Capital was recently named the #1 most trusted bank in the country on Newsweek’s inaugural list of America’s Most Trusted Companies.