Security Controls Analyst

Insight Global (United States); McKinney (TX); On-site; USD 95,000 - 140,000; Full time

Job summary

Insight Global in McKinney, TX, seeks an IT Risk QA Senior Analyst to translate cybersecurity standards into testable controls and independently test those controls for design and operating effectiveness. This hands-on role requires collaboration with IT SMEs and control owners throughout the testing lifecycle.

The ideal candidate brings 5+ years in cybersecurity GRC or related fields, strong experience in designing controls, and familiarity with NIST/ISO frameworks.

Qualifications

• 5+ years of cybersecurity GRC, IT Risk, IT Audit, or security controls experience.
• Experience designing and creating net-new cybersecurity controls.
• Translating cybersecurity standards into clear, testable controls.
• Hands-on design and operating effectiveness testing.
• Review processes, evidence, samples, exceptions, and control gaps.
• Experience with technical IT SMEs and control owners.
• Ability to drive controls from design through testing and completion.
• Knowledge across IAM, cloud security, cryptography, network security, vulnerability management, and data protection.
• Knowledge of NIST, FFIEC, CIS Controls, ISO 27001, or SOX ITGC.
• Financial services or highly regulated industry experience.
• CISA, CISSP, CISM, CRISC, Security+, or similar certification.
• Experience with Archer or similar GRC platforms.

Responsibilities

• Translate established cybersecurity standards into testable controls.
• Design and implement net-new security controls.
• Test controls for design and operating effectiveness.
• Collaborate with technical IT SMEs and control owners.
• Drive controls from design through testing and completion.

Skills

Cybersecurity GRC

Security controls design

Test design & testing

IAM

Cloud security

Network security

Archer knowledge

Education

CISA

CISSP

CISM

CRISC

Security+

ISO 27001

Tools

Archer

Job description

Job Description

The IT Risk QA Senior Analyst will support the IT Risk & Governance team by translating established cybersecurity standards into net-new, testable security controls. This person will work directly with technical IT SMEs to understand processes, recommend and design appropriate controls, and independently test those controls for both design and operating effectiveness. This is a hands-on technical controls role, not an audit coordination or document collection position

Skills and Requirements

• 5+ years of cybersecurity GRC, IT Risk, IT Audit, or security controls experience
• Strong experience designing and creating net-new cybersecurity controls
• Experience translating cybersecurity standards into clear, testable controls
• Hands-on experience with design effectiveness and operating effectiveness testing
• Ability to review technical processes, evidence, samples, exceptions, and control gaps
• Experience working directly with technical IT SMEs and control owners
• Experience independently driving controls from design through testing and completion
• Technical knowledge across IAM, cloud security, cryptography, network security, vulnerability management, and data protection
• Knowledge of NIST, FFIEC, CIS Controls, ISO 27001, or SOX ITGC
• Financial services or highly regulated industry experience
• CISA, CISSP, CISM, CRISC, Security+, or similar certification
• Experience with Archer or similar GRC platforms

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [e-mail].