RCSA Risk & Control Testing Analyst — Fraud & InfoSec

Brooklyn Arts Council; Vienna (VA); Hybrid; USD 99,000 - 121,000; Full time

Benefits offered by this job

Comprehensive Medical, Dental, and Vis

Employer-Paid Life Insurance

Employer-Paid Short-Term and Long-Term

401(k)

Paid Time Off (PTO) including Vacation

Educational Assistance

Job summary

BRMi is seeking a Risk Analyst – Control Testing to support the RCSA process by performing control design assessments and control performance testing in fraud operations and information security. The role evaluates design and effectiveness of internal controls and documents testing results to support remediation plans.

The ideal candidate has experience in internal audit or RCSA, understands audit methodologies and risk frameworks, sampling techniques, and communicates findings clearly to

Qualifications

• 3–5 years of experience performing control testing within internal audit, RCSA, risk management, or similar environment.
• Advanced understanding of internal audit and control testing techniques.
• Strong knowledge of risk management frameworks and control assessment methodologies.
• Experience conducting control design assessments and control performance or operating effectiveness testing.
• Knowledge of sampling methodologies used to support control testing.
• Experience identifying, documenting, and communicating control deficiencies and testing findings.

Responsibilities

• Participate in the Risk Control Self-Assessment (RCSA) process and related control testing activities.
• Execute design assessments on assigned controls to determine whether controls are appropriately designed to mitigate identified risks.
• Perform control performance and operating effectiveness testing on assigned controls.
• Follow enterprise testing guidelines, methodologies, and documentation standards.
• Apply sampling techniques to select appropriate populations and samples for control testing.
• Review supporting documentation, evidence, processes, and procedures to evaluate control effectiveness.
• Analyze testing results and determine whether controls are operating as intended.
• Document testing procedures, analysis, conclusions, findings, and supporting evidence.
• Identify control deficiencies, exceptions, gaps, and other areas of risk discovered through testing.
• Perform root-cause analysis for identified control deficiencies.
• Assist business and risk stakeholders in developing remediation plans.
• Communicate testing results and findings clearly to business partners, risk stakeholders, and management.
• Track testing activities, findings, remediation efforts, and related deliverables to ensure timelines are met.
• Maintain organized testing documentation to support internal review, audit, and regulatory requirements.
• Collaborate with stakeholders across security, fraud operations, information security, risk management, and other areas.
• Manage multiple control testing assignments and priorities within deadlines.
• Support continuous improvement of control testing processes and risk practices.
• Perform other duties as required.

Skills

Control testing

RCSA

Risk assessment

Analytical thinking

Documentation

Communication

Time management

Job description

BRMi is seeking a Risk Analyst – Control Testing to support the RCSA process by performing control design assessments and control performance testing in fraud operations and information security. The role evaluates design and effectiveness of internal controls and documents testing results to support remediation plans.

The ideal candidate has experience in internal audit or RCSA, understands audit methodologies and risk frameworks, sampling techniques, and communicates findings clearly to