Security Program Strategy & Controls Assurance Analyst

INSPYR Solutions; Vienna (VA); Hybrid; USD 55,000 - 66,000; Full time

Benefits offered by this job

Comprehensive medical benefits

Competitive pay

401(k) retirement plan

…and much more!

Job summary

INSPYR Solutions is seeking an Analyst, Security Program Strategy Controls Assurance in Vienna, VA. The role supports planning, scoping, executing, and reporting IT and information security control testing within an Agile environment.

The candidate will collaborate with business partners and stakeholders, perform risk and control assessments, and communicate findings to leadership. A CISSP/CISA/CCSP/CRISC certification set and a bachelor’s degree or equivalent is preferred.

Qualifications

• Experience in control testing across the three lines of defense (Audit, ERM, First Line).
• Experience in audit and information security risk assessments.
• Knowledge of FFIEC, NIST, ISO security standards and frameworks.
• Familiarity with NCUA, FFIEC, GLBA, NIST 800-series, ISO 27001/27002, SANS/CIS 20, PCI DSS.

Responsibilities

• Plan and scope Asset Based Assessments; develop communications and risk matrices.
• Perform walk-throughs with business partners to identify actual vs. expected controls.
• Create test strategies to validate controls and document findings.
• Document work per IIA reperformance standards and prepare final reports.
• Present assessment results to leadership and stakeholders.

Skills

Planning

Risk assessment

Strong communication

Analytical skills

Problem solving

Stakeholder management

Education

Bachelor's degree or equivalent in business/info systems

CISSP

CISA

CCSP

CRISC

Job description

INSPYR Solutions is seeking an Analyst, Security Program Strategy Controls Assurance in Vienna, VA. The role supports planning, scoping, executing, and reporting IT and information security control testing within an Agile environment.

The candidate will collaborate with business partners and stakeholders, perform risk and control assessments, and communicate findings to leadership. A CISSP/CISA/CCSP/CRISC certification set and a bachelor’s degree or equivalent is preferred.