resourcesysNew York, NY
IT Risk & Control Senior Analyst
IT Risk & Control Senior Analyst
IT Risk & Control Senior Analyst
resourcesysNew York, NY
3 days ago
Computer Systems Design ServicesPortfolio Management and Investment AdviceCustom Computer Programming Services
Apply for this role (opens in a new tab)Hiring: IT Risk & Control Senior Analyst📍 Locations: Charlotte, NC / New York, NY / Jersey City, NJ / Phoenix, AZ (4 Days a week)
💼 Role: IT Risk & Control Senior Analyst
Work Authorization: W2 Only - No Sponsorship
We are looking for an experienced IT Risk & Control Senior Analyst with a strong background in Cybersecurity, IT Risk Management, and IT Control Testing within complex enterprise or banking environments. The ideal candidate will have hands-on experience reviewing and challenging IT controls, conducting Test of Design (ToD) and Test of Effectiveness (ToE), and evaluating control effectiveness against internal policies and regulatory requirements.
Key Responsibilities:
Conduct Process, Risk & Control (PRC) reviews to evaluate IT control effectiveness.
Perform independent review and challenge of IT controls tested by First Line of Defense (1LOD) teams.
Review Test of Design (ToD) and Test of Effectiveness (ToE) procedures and supporting evidence.
Evaluate control testing results against internal policies, governing principles, and security standards.
Identify control gaps, assess cyber risks, and recommend appropriate mitigation strategies.
Support regulatory requirements, audits, and compliance deliverables.
Analyze control testing data and prepare detailed reports, metrics, and executive-level summaries.
Provide guidance to 1LOD teams to ensure testing practices meet internal standards.
Collaborate with IT, Cybersecurity, Risk, Audit, and Business teams.
Required Qualifications:
Bachelor's degree or equivalent experience.12+ years of experience in Information Security, Cybersecurity, or IT Risk Management.6+ years of experience in Cybersecurity Operations, Incident Response, IT Risk Management, or Investigations.
Hands-on experience with IT control testing, including ToD and ToE.Strong understanding of IT Risk, Control Assessment, and Process/Risk/Control (PRC) reviews.
Experience reviewing control evidence and evaluating control effectiveness.
Strong analytical, documentation, reporting, and stakeholder management skills.
Preferred Qualifications:
- Prior IT Control Audit experience.
- Banking or financial services industry experience.
- Knowledge of cybersecurity regulations, policies, and control frameworks.
- Familiarity with NIST CSF, FAIR, and other risk assessment frameworks.
- Strong understanding of cybersecurity threats, trends, and technologies.📩 Interested candidates can share their updated resume.#Hiring #ITRisk #ITControls #Cyber
- Security #Risk
- Management #ITAudit #Control
- Testing #TOD #TOE #NIST #Banking
Jobs
Also on the board Same function, level within a rung
Level
Lead
Location
New York, NY
Occupation
Information Security Analysts
Industry
Computer Systems Design Services
Posted
3 days ago