Jr. Security Testing Analyst - 17938

Seneca Resources Company, LLC; Vienna (VA); On-site; USD 55,000 - 63,000; Full time

Job summary

Seneca Resources is seeking a Jr. Security Testing Analyst to join our Vienna, VA team. The role focuses on planning, scoping, executing, and reporting testing of IT and information security controls within an Agile environment.

The candidate will collaborate with business partners, document findings, and present results to leadership. Onsite work three days per week with competitive W2 pay in a contract setup.

Qualifications

• Experience in control testing across audit, ERM and first line.
• Knowledge of FFIEC, NIST, ISO and related InfoSec frameworks.
• Ability to interact with business partners and senior stakeholders.
• Strong documentation and reporting skills.

Responsibilities

• Plan and scope asset based assessments with communications and risk matrices.
• Perform walk-throughs with partners to identify actual vs expected controls.
• Create test strategies to verify controls.
• Document work to meet IIA reperformance standards.
• Document issues and final reports.
• Present assessment results to leadership.
• Support the program with additional duties as assigned.

Skills

Audit experience

ERM experience

First line work

Information security risk

NIST/ISO knowledge

InfoSec certs

Communication skills

Stakeholder management

Three lines defense experience

Education

Bachelor's degree in IS or related

Job description

Position: Jr. Security Testing Analyst

Location: Vienna, VA (3 day onsite a week)

Pay rate: $40-46/hr on W2

Contract

Job Description

The Analyst will serve in an Asset Based Testing role that will help plan, scope, execute, and report testing of IT and Information Security controls. The Analyst will be responsible for all phases of the assessment and communications with business partners and other stakeholders. They will work in an Agile environment.

Responsibilities

• Planning & Scoping of Asset Based Assessments to include development of communications, risk & control matrices, scope documents and other supporting information
• Perform walk-throughs with business partners identifying actual versus expected controls
• Create test strategies to test actual controls
• Document all work performed to meet the IIA reperformance standard
• Document issues and final reports
• Present to leadership results of assessments
• Any other duties as assigned to support the program
  

Position: Jr. Security Testing Analyst

Location: Vienna, VA (3 day onsite a week)

Pay rate: $40-46/hr on W2

Contract

Job Description

The Analyst will serve in an Asset Based Testing role that will help plan, scope, execute, and report testing of IT and Information Security controls. The Analyst will be responsible for all phases of the assessment and communications with business partners and other stakeholders. They will work in an Agile environment.

Responsibilities

• Planning & Scoping of Asset Based Assessments to include development of communications, risk & control matrices, scope documents and other supporting information
• Perform walk-throughs with business partners identifying actual versus expected controls
• Create test strategies to test actual controls
• Document all work performed to meet the IIA reperformance standard
• Document issues and final reports
• Present to leadership results of assessments
• Any other duties as assigned to support the program
  

Qualification

• Experience in control testing to include experience in some of the three lines of defense (Audit, ERM, First Line areas)
• Experience in audit and information security risk assessments
• Knowledge of applicable federal and state laws, rules and regulations (i.e. Federal Financial Institutions Examination Manual (FFIEC), National Information of Standards and Technology (NIST), and International Standards Organization (ISO)
• Knowledge of NCUA, FFIEC, GLBA, NIST (including the Cyber Security Framework and 800 Series), ISO 27001/27002, SANS/CIS 20, PCI DSS, and other Information Security requirements and frameworks
• Experience in working with all levels of staff, management, stakeholders, and third parties
• Effective planning and organizational skills
• Effective research, analytical and problem solving skills
• Strong verbal, written and interpersonal communication skills, including technical writing
• Bachelor Degree in business, information systems or related field or equivalent work/military experience
• CISSP, CISA, CCSP, CRISC or other Information Security certifications
• Ability to present findings and conclusions clearly and concisely
• Experience in working with all levels of staff, management, stakeholders, and third parties
• Ability to build effective relationships through rapport, trust, diplomacy, and tact
• Strong word processing and spreadsheet software skills

About Seneca Resources

Seneca Resources is client driven provider of strategic Information Technology consulting services and Workforce Solutions to government and industry. Seneca Resources is a leading IT services provider with offices in Reston, Virginia, Alabama and Columbia, Maryland that service clients throughout the United States. The key to our success lies within our strong corporate culture which drives our business. We challenge our staff through engaging work, and we reward our staff through competitive compensation, extensive professional training, and excellent opportunities for career advancement. In turn, we look for only the best and brightest to join our team. We are an Equal Opportunity Employer and value the benefits of diversity in our workplace.