Testing Analyst

INSPYR Solutions; Merrifield (VA); Hybrid; USD 65,000 - 95,000; Full time

Job summary

INSPYR Solutions in Vienna, VA is seeking a Testing Analyst to plan, scope, execute, and report IT and information security control testing in an Agile environment.

The role collaborates with business partners and leadership to present findings and drive risk-based improvements. Strong communication and analytical skills are essential for success.

Qualifications

• Experience in control testing across audit, ERM, or first-line risk areas.
• Knowledge of FFIEC, NIST, ISO frameworks and related information security controls.
• CISA, CISSP, CCSP or CRISC certifications preferred.

Responsibilities

• Plan and scope asset-based assessments and develop communication and scope documents.
• Perform walkthroughs with business partners to identify actual vs. expected controls.
• Create test strategies to validate controls and document results.
• Document work to meet professional standards and prepare final reports.
• Present findings to leadership and drive remediation actions.

Skills

Communication skills

Analytical thinking

Interpersonal skills

Planning & organization

Education

Bachelor degree in business or information systems

Tools

MS Word

Excel

Job description

Title: Testing Analyst

Location: Vienna, VA (Hybrid)

Basic Purpose

The Analyst will serve in an Asset Based Testing role that will help plan, scope, execute, and report testing of IT and Information Security controls. The Analyst will be responsible for all phases of the assessment and communications with business partners and other stakeholders. They will work in an Agile environment.

Responsibilities

• Planning & Scoping of Asset Based Assessments to include development of communications, risk & control matrices, scope documents and other supporting information
• Perform walk-throughs with business partners identifying actual versus expected controls
• Create test strategies to test actual controls
• Document all work performed to meet the IIA reperformance standard
• Document issues and final reports
• Present to leadership results of assessments
• Any other duties as assigned to support the program

Qualifications

• Experience in control testing to include experience in some of the three lines of defense (Audit, ERM, First Line areas)
• Experience in audit and information security risk assessments
• Knowledge of applicable federal and state laws, rules and regulations (i.e. Federal Financial Institutions Examination Manual (FFIEC), National Information of Standards and Technology (NIST), and International Standards Organization (ISO)
• Knowledge of NCUA, FFIEC, GLBA, NIST (including the Cyber Security Framework and 800 Series), ISO 27001/27002, SANS/CIS 20, PCI DSS, and other Information Security requirements and frameworks
• Experience in working with all levels of staff, management, stakeholders, and third parties
• Effective planning and organizational skills
• Effective research, analytical and problem solving skills
• Strong verbal, written and interpersonal communication skills, including technical writing
• Bachelor Degree in business, information systems or related field or equivalent work/military experience
• CISSP, CISA, CCSP, CRISC or other Information Security certifications
• Ability to present findings and conclusions clearly and concisely
• Experience in working with all levels of staff, management, stakeholders, and third parties
• Ability to build effective relationships through rapport, trust, diplomacy, and tact
• Strong word processing and spreadsheet software skills Bank Secrecy Section Remains cognizant of and adheres to Client's policies, procedures and regulations pertaining to the Bank

Information collected and processed through your application with INSPYR Solutions (including any job applications you choose to submit) is subject to INSPYR Solutions’ Privacy Policy and INSPYR Solutions’ AI and Automated Employment Decision Tool Policy: https://www.inspyrsolutions.com/policies/. By submitting an application, you are consenting to being contacted by INSPYR Solutions through phone, email, or text.