Information Security AnalystRisk Management division is seeking experienced Information Security Analyst to support Enhanced Information Risk Reviews for third party information security and IT controls.Responsibilities include:Leverage the compliance report, information security policies and procedures, and other relevant documents to test the design and operating effectiveness of the controlsIdentify, understand and manage Information and Technology risk associated with the operational processesProvide an advisory service to mitigate the risks associated with InfoSec security assessmentsPartner and liaise with other risk teams, maintaining excellent relationships and providing transparencyQualification:5 – 8 years related experienceBachelor’s degree in Computer Science, Information Systems, related field or equivalent work experienceExperience implementing and assessing operational risk and internal control environmentsExperience in IT governance and controls, including governance frameworks/ standards, COBIT, FFIEC, COSO, ISO 27000, etc.