Technology Risk Analyst: Master IT Controls & Compliance

Socket.dev; Covington (KY); On-site; USD 90,000 - 120,000; Full time

Job summary

Fidelity is seeking a proactive risk professional to contribute to the Technology Risk team within Enterprise Technology Risk. You will identify, monitor, and assess controls across applications and platforms, support audits (SOC 1/2) and ITGC assessments, and collaborate with internal partners to ensure regulatory compliance.

Responsibilities include risk management support, control testing, and continuous monitoring.

Qualifications

• 2 years in Risk, Compliance, Information Security, IT, Controls or Audit roles.
• Bachelor’s degree or equivalent in Computer Science, Risk Management and Assurance, Cyber Security, or related field.
• Technical capabilities across multiple areas (infrastructure, application controls, production support, cybersecurity, access management, network and cloud, resiliency).
• Knowledge of current software and technology trends used by Technology (e.g., Azure, AWS, ALM, SaaS).
• Proven record of analyzing and/or supporting risk programs.
• Ability to communicate risk programs to external auditors and regulators.

Responsibilities

• Support BU risk management functions including control testing, risk and control consulting, reporting, and risk support.
• Perform technology risk and controls assessments for applications, platforms, and services.
• Assist in internal audits and external audits (SOC 1, SOC 2) by identifying new applications and managing ITGC assessments.
• Establish ongoing cadence to measure and report on control effectiveness.

Skills

Risk management

Communication

Regulatory knowledge

Audit coordination

Certifications

Problem solving

Relationship building

Education

Bachelor’s degree or equivalent

Job description

Fidelity is seeking a proactive risk professional to contribute to the Technology Risk team within Enterprise Technology Risk. You will identify, monitor, and assess controls across applications and platforms, support audits (SOC 1/2) and ITGC assessments, and collaborate with internal partners to ensure regulatory compliance.

Responsibilities include risk management support, control testing, and continuous monitoring.