Senior IT Controls & Cyber Risk Analyst

texascapitalbank; Richardson (TX); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Health insurance

Wellness program

Fertility & family benefits

Life & disability insurance

401K match

Paid leave

Paid holidays

PTO

Job summary

Texas Capital is seeking an IT Control Testing Senior Analyst to perform risk-based assessments of technology and cybersecurity controls in the Second Line of Defense. You will evaluate ITGCs, ITACs, automated and cybersecurity controls, and partner with Technology, Information Security, Operational Risk, Compliance, and Internal Audit to strengthen the risk program.

The role requires 5+ years in technology risk or IT audit within regulated environments, and a solid grounding in NIST CSF, COBIT,

Qualifications

• Minimum 5 years of experience in Technology Risk Management, IT Audit, Controls Testing, Cyber Risk Management, Operational Risk, or Technology Compliance within a regulated environment.
• Bachelor's degree in information technology, Information Systems, Cybersecurity, Business, Accounting, or related discipline.
• Demonstrated experience performing independent testing of ITGCs, ITACs, automated controls, and cybersecurity controls.
• Strong knowledge of NIST CSF, COBIT, COSO, FFIEC guidance, and SOX IT control principles.
• Experience assessing control deficiencies, residual risk, and business impacts.
• Experience testing controls related to Access Management, Change Management, SDLC, Technology Operations, Application Security, Data Governance, or Cloud Technologies.
• Strong analytical, critical thinking, communication, and executive presence

Responsibilities

• IT Regulatory Compliance & Alignment: Evaluate industry standards, regulatory mandates, and legal requirements relevant to technology and information security.
• Technology Control Testing & Assurance: Execute independent testing of ITGCs, ITACs, automated controls, and cybersecurity controls.
• Technology Risk Assessment & Analysis: Evaluate control effectiveness in mitigating technology, cyber, operational, regulatory, and data risks.
• Second Line of Defense Oversight & Challenge: Provide independent oversight to First Line regarding control design, testing results, and remediation plans.
• Issue Management & Remediation Oversight: Review management action plans, validate corrective actions, and ensure remediation addresses root causes.
• Reporting & Risk Communication: Prepare testing reports, risk assessments, management summaries, and executive reporting.
• Regulatory, Audit & Framework Alignment: Ensure testing activities align with NIST, COBIT, COSO, FFIEC guidance, and SOX IT control principles.
• Continuous Improvement: Enhance testing methodologies, reporting capabilities, standards, and QA practices.

Skills

NIST CSF

COBIT

COSO

IT Audit

Education

Bachelor's degree in information technology, Information Systems, Cybersecurity, Business, Accounting, or related discipline

Job description

Texas Capital is seeking an IT Control Testing Senior Analyst to perform risk-based assessments of technology and cybersecurity controls in the Second Line of Defense. You will evaluate ITGCs, ITACs, automated and cybersecurity controls, and partner with Technology, Information Security, Operational Risk, Compliance, and Internal Audit to strengthen the risk program.

The role requires 5+ years in technology risk or IT audit within regulated environments, and a solid grounding in NIST CSF, COBIT,