Tech Risk & Controls Analyst - SDLC & Security Governance

TechDigital Group; Phoenix (AZ); On-site; USD 120,000 - 150,000; Full time

Job summary

TechDigital Group seeks a Technology Risk & Controls Analyst with hands-on ITGC/ITAC testing and expertise in security controls within financial services. You will act as a trusted advisor to technology teams, ensuring robust control design, testing, and remediation, while supporting audits and regulatory requests.

Ideal candidates have 5+ years in technology risk, information security, and GRC, with strong analytical skills and experience in SDLC governance and control monitoring.

Qualifications

• 5+ years of experience in Technology Risk, Information Security, IT Controls, Audit, or GRC within financial services.
• Hands-on experience with ITGC, ITAC, and Information Security control testing.
• Strong knowledge of risk management, controls, RCSA, audit, and regulatory compliance.
• Experience supporting SDLC and Architecture governance processes.
• Excellent analytical, documentation, and stakeholder management skills.

Responsibilities

• Conduct ITGC, ITAC, and Information Security control testing and document results.
• Perform Risk & Control Self-Assessments (RCSA) and identify technology risks and control gaps.
• Evaluate control design and operating effectiveness across SDLC, Architecture, and Technology processes.
• Manage audit findings, control deficiencies, and remediation activities through closure.
• Support internal/external audits, regulatory reviews, and compliance requests.
• Partner with SDLC and Architecture teams to provide risk guidance and governance oversight.
• Monitor risk metrics, control performance, and compliance status.

Skills

Technology Risk

Information Security

IT Controls

Audit

GRC

SDLC Governance

Job description

TechDigital Group seeks a Technology Risk & Controls Analyst with hands-on ITGC/ITAC testing and expertise in security controls within financial services. You will act as a trusted advisor to technology teams, ensuring robust control design, testing, and remediation, while supporting audits and regulatory requests.

Ideal candidates have 5+ years in technology risk, information security, and GRC, with strong analytical skills and experience in SDLC governance and control monitoring.