IT Risk & Controls Analyst - Governance & Compliance

BMA Group Global; Carolina (PR); On-site; USD 80,000 - 110,000; Full time

Job summary

BMA Group Global is seeking a Risk and Control Analyst to strengthen IT governance, risk management, compliance, and change management across technology environments. You will participate in IT control testing (ITGCs and application controls), support risk assessments, and assist with audit activities to ensure policy alignment and regulatory compliance.

Collaborate with IT, Security, and business teams to improve controls, maintain risk documentation, and support continuous improvement of IT

Qualifications

• Bachelor’s degree preferred; equivalent relevant experience may be considered.
• 3–5 years in IT Audit, IT Risk, Compliance, Information Security, Change Management, or Information Systems.
• Knowledge of IT controls, ITGCs, risk assessments, ITIL, and change management practices.

Responsibilities

• Perform and document IT control testing (ITGCs and application controls).
• Support IT risk assessments and monitor risks across systems and processes.
• Review IT changes for approvals, documentation, testing, and change-management compliance.
• Assist audits by gathering evidence, documenting findings, and tracking remediation.
• Collaborate with IT, Security, and business teams to strengthen controls and implementations.
• Maintain IT policies, risk documentation, and control records.

Skills

IT Control Testing

ITGCs

IT Risk Assessments

Change Management

Audits

Education

Bachelor's degree, Information Technology/Information Systems/CS

Job description

BMA Group Global is seeking a Risk and Control Analyst to strengthen IT governance, risk management, compliance, and change management across technology environments. You will participate in IT control testing (ITGCs and application controls), support risk assessments, and assist with audit activities to ensure policy alignment and regulatory compliance.

Collaborate with IT, Security, and business teams to improve controls, maintain risk documentation, and support continuous improvement of IT