Risk & Control Analyst

BMA Group Global; Carolina (PR); On-site; USD 80,000 - 110,000; Full time

Job summary

BMA Group Global is seeking a Risk and Control Analyst to strengthen IT governance, risk management, compliance, and change management across technology environments. You will participate in IT control testing (ITGCs and application controls), support risk assessments, and assist with audit activities to ensure policy alignment and regulatory compliance.

Collaborate with IT, Security, and business teams to improve controls, maintain risk documentation, and support continuous improvement of IT

Qualifications

• Bachelor’s degree preferred; equivalent relevant experience may be considered.
• 3–5 years in IT Audit, IT Risk, Compliance, Information Security, Change Management, or Information Systems.
• Knowledge of IT controls, ITGCs, risk assessments, ITIL, and change management practices.

Responsibilities

• Perform and document IT control testing (ITGCs and application controls).
• Support IT risk assessments and monitor risks across systems and processes.
• Review IT changes for approvals, documentation, testing, and change-management compliance.
• Assist audits by gathering evidence, documenting findings, and tracking remediation.
• Collaborate with IT, Security, and business teams to strengthen controls and implementations.
• Maintain IT policies, risk documentation, and control records.

Skills

IT Control Testing

ITGCs

IT Risk Assessments

Change Management

Audits

Education

Bachelor's degree, Information Technology/Information Systems/CS

Job description

The Risk and Control Analyst supports IT governance, risk management, compliance, and change management activities to strengthen the organization's technology control environment. The role assists with IT control testing, risk assessments, audit activities, and the review of technology changes to ensure alignment with internal policies, regulatory requirements, and ITIL best practices.

Key Responsibilities

• Perform and document IT control testing, including IT General Controls (ITGC) and application controls.
• Support IT risk assessments and monitor risks related to systems, applications, user access, and technology processes.
• Review IT changes to confirm appropriate approvals, documentation, testing, and compliance with change management procedures.
• Support internal and external audits by gathering evidence, documenting findings, and tracking remediation activities.
• Collaborate with IT, Security, and business teams to strengthen controls and support compliant technology implementations.
• Maintain IT policies, procedures, risk documentation, and control records.
• Support continuous improvement initiatives related to IT governance, risk, compliance, and operational effectiveness.

Qualifications

• Bachelor's degree in Information Technology, Information Systems, Computer Science, or a related field preferred; equivalent relevant experience may be considered.
• 3–5 years of experience in IT Audit, IT Risk, Compliance, Information Security, Change Management, or Information Systems.
• Knowledge of IT controls, ITGCs, risk assessments, ITIL, and change management practices.
• Experience supporting audits or working within regulated or compliance-driven environments preferred.
• Strong analytical, documentation, communication, and organizational skills.
• Ability to collaborate effectively with both technical and business stakeholders.

Preferred Certifications

• CISA, CRISC, ITIL Foundation, CISM, or other relevant Governance, Risk, and Compliance (GRC) certifications are a plus.