IT Risk & Controls Testing Analyst ---- Locals ONLY ----- HYbrid role

Zillion Technologies, Inc.; Vienna (VA); On-site; USD 69,000 - 76,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

Disability Insurance

401(k)

Job summary

Zillion Technologies, Inc. in Vienna, VA seeks an Analyst to plan, scope, and execute IT and information security control testing in an Agile environment. You will work with business partners to assess controls and report results to leadership.

The role requires experience in control testing, security frameworks such as NIST/ISO, and certifications (CISSP/CISA/CCSP/CRISC) or equivalent, plus a bachelor’s degree. This is a long-term position with competitive compensation and W2 pay.

Qualifications

• Experience in control testing across Audit, ERM, and First Line areas.
• Experience in audit and information security risk assessments.
• Knowledge of FFIEC, NIST, ISO and related standards.
• Knowledge of NCUA, FFIEC, GLBA, NIST CSF 800-series, ISO 27001/27002, SANS/CIS 20, PCI DSS and related requirements.
• Experience in working with all levels of staff, management, stakeholders, and third parties.
• Strong planning and organizational skills.
• Analytical and problem-solving abilities.
• Excellent verbal and written communication.

Responsibilities

• Plan and scope asset-based assessments; develop communications, risk and control matrices, scope documents.
• Perform walk-throughs with business partners identifying actual vs expected controls.
• Create test strategies to test actual controls.
• Document all work to meet the IIA reperformance standard.
• Document issues and final reports.
• Present findings and outcomes to leadership.
• Assist with additional duties to support the program.

Skills

Control testing

Audit & risk assessments

Security standards

Security frameworks

Stakeholder management

Planning

Analytical thinking

Communication

Bachelor degree or equivalent

Information security certifications

Education

Bachelor Degree in business, information systems or related field or equivalent work/military experience

CISSP, CISA, CCSP, CRISC or other Information Security certifications

Job description

Work sponsorship is not available for this position. Applicants must be a United States citizen, Green card holder or EAD Green Cards at the direction of our client

Reach Shaily Sharma || 908-487-4334

shaily(at)zilliontechnologies(dot)com

Duration : Long term ongoing with no end date

Compensation

Pay rate : $50 to $55/hr on W2

*This is the targeted compensation range for this role per hour. Please note that this range is provided as a guideline and the final offer will be based on several factors, including but not limited to, skillset and competencies, level of experience, education, certifications, and location.

We offer a comprehensive benefits package including medical, dental, vision, and disability insurance; 401(k)

Basic Purpose

The Analyst will serve in an Asset Based Testing role that will help plan, scope, execute, and report testing of IT and Information Security controls. The Analyst will be responsible for all phases of the assessment and communications with business partners and other stakeholders. They will work in an Agile environment.

Responsibilities

• Planning & Scoping of Asset Based Assessments to include development of communications, risk & control matrices, scope documents and other supporting information
• Perform walk-throughs with business partners identifying actual versus expected controls
• Create test strategies to test actual controls
• Document all work performed to meet the IIA reperformance standard
• Document issues and final reports
• Present to leadership results of assessments
• Any other duties as assigned to support the program

Qualifications

• Experience in control testing to include experience in some of the three lines of defense (Audit, ERM, First Line areas)
• Experience in audit and information security risk assessments
• Knowledge of applicable federal and state laws, rules and regulations (i.e. Federal Financial Institutions Examination Manual (FFIEC), National Information of Standards and Technology (NIST), and International Standards Organization (ISO)
• Knowledge of NCUA, FFIEC, GLBA, NIST (including the Cyber Security Framework and 800 Series), ISO 27001/27002, SANS/CIS 20, PCI DSS, and other Information Security requirements and frameworks
• Experience in working with all levels of staff, management, stakeholders, and third parties
• Effective planning and organizational skills
• Effective research, analytical and problem solving skills
• Strong verbal, written and interpersonal communication skills, including technical writing
• Bachelor Degree in business, information systems or related field or equivalent work/military experience
• CISSP, CISA, CCSP, CRISC or other Information Security certifications
• Ability to present findings and conclusions clearly and concisely
• Experience in working with all levels of staff, management, stakeholders, and third parties
• Ability to build effective relationships through rapport, trust, diplomacy, and tact
• Strong word processing and spreadsheet software skills

Please send qualified resumes directly to : shaily(at)zilliontechnologies(dot)com // 9084874334

Thanks,

Shaily Sharma

Zillion Technologies Inc.

9084874334

Email: shaily(at)zilliontechnologies(dot)com // 9084874334

"We are an equal opportunity employer. We do not discriminate on the basis of race, color, religion, sex, national origin, age, disability, genetic information, veteran status, sexual orientation, gender identity, or any other characteristic protected by applicable federal, state, or local law."