Hiring: IT Risk & Control Senior Analyst
📍 Locations: Charlotte, NC / New York, NY / Jersey City, NJ / Phoenix, AZ (4 Days a week)
💼 Role: IT Risk & Control Senior Analyst
Work Authorization: W2 Only - No Sponsorship
We are looking for an experienced IT Risk & Control Senior Analyst with a strong background in Cybersecurity, IT Risk Management, and IT Control Testing within complex enterprise or banking environments.
The ideal candidate will have hands-on experience reviewing and challenging IT controls, conducting Test of Design (ToD) and Test of Effectiveness (ToE), and evaluating control effectiveness against internal policies and regulatory requirements.
Key Responsibilities
- Conduct Process, Risk & Control (PRC) reviews to evaluate IT control effectiveness.
- Perform independent review and challenge of IT controls tested by First Line of Defense (1LOD) teams.
- Review Test of Design (ToD) and Test of Effectiveness (ToE) procedures and supporting evidence.
- Evaluate control testing results against internal policies, governing principles, and security standards.
- Identify control gaps, assess cyber risks, and recommend appropriate mitigation strategies.
- Support regulatory requirements, audits, and compliance deliverables.
- Analyze control testing data and prepare detailed reports, metrics, and executive-level summaries.
- Provide guidance to 1LOD teams to ensure testing practices meet internal standards.
- Collaborate with IT, Cybersecurity, Risk, Audit, and Business teams.
Required Qualifications
- Bachelor's degree or equivalent experience.
- 12+ years of experience in Information Security, Cybersecurity, or IT Risk Management.
- 6+ years of experience in Cybersecurity Operations, Incident Response, IT Risk Management, or Investigations.
- Hands-on experience with IT control testing, including ToD and ToE.
- Strong understanding of IT Risk, Control Assessment, and Process/Risk/Control (PRC) reviews.
- Experience reviewing control evidence and evaluating control effectiveness.
- Strong analytical, documentation, reporting, and stakeholder management skills.
Preferred Qualifications
- Prior IT Control Audit experience.
- Banking or financial services industry experience.
- Knowledge of cybersecurity regulations, policies, and control frameworks.
- Familiarity with NIST CSF, FAIR, and other risk assessment frameworks.
- Strong understanding of cybersecurity threats, trends, and technologies.
📩 Interested candidates can share their updated resume.
#Hiring #ITRisk #ITControls #CyberSecurity #RiskManagement #ITAudit #ControlTesting #TOD #TOE #NIST #BankingJobs
IT Risk & Control Senior Analyst in New York at Resourcesys Inc
This position is listed as full time and onsite. It was posted last week.