Senior IT Risk & Controls Analyst 2LOD Cyber Risk

CloudIngest; Charlotte (NC); Hybrid; USD 120,000 - 170,000; Full time

Job summary

CloudIngest is seeking an IT Risk & Control Senior Analyst to join the Second Line of Defence (2LOD) Cybersecurity Risk function in a banking environment. The role focuses on IT risk management, cybersecurity controls, and governance, providing independent oversight to 1LOD teams.

The ideal candidate brings 10+ years in information security/risk and 6+ years in control testing and incident response, with experience in financial services and familiarity with CSF, SOX, and IT GRC frameworks.

Qualifications

• 10+ years of experience in Information Security, Cybersecurity, IT Risk Management, or Technology Risk.
• 6+ years of experience in Cybersecurity Operations, Incident Response, Control Testing, IT Risk, or Security Investigations.
• Strong experience with IT control audits, control validation, and testing methodologies.
• Proven experience supporting Banking / Financial Services organizations.
• Familiarity with regulatory frameworks: NIST CSF, SOX, IT Governance & Risk Management Frameworks.

Responsibilities

• Provide independent oversight of IT controls and risk management activities as a Second Line of Defence (2LOD).
• Perform Test of Design (TOD) and Test of Effectiveness (TOE) reviews for cybersecurity/tech controls.
• Conduct PRC (Process/Risk/Control) assessments and evaluate control maturity and effectiveness.
• Guide and challenge First Line of Defence (1LOD) control testing teams.
• Support internal audits, regulatory examinations, and remediation activities.
• Develop risk reporting, dashboards, and governance documentation for leadership and regulators.

Skills

IT risk management

Cybersecurity controls

Control testing

Regulatory compliance

Governance frameworks

TOD/TOE testing

Tools

ITGC

GRC Tools

Job description

CloudIngest is seeking an IT Risk & Control Senior Analyst to join the Second Line of Defence (2LOD) Cybersecurity Risk function in a banking environment. The role focuses on IT risk management, cybersecurity controls, and governance, providing independent oversight to 1LOD teams.

The ideal candidate brings 10+ years in information security/risk and 6+ years in control testing and incident response, with experience in financial services and familiarity with CSF, SOX, and IT GRC frameworks.