Information Security Controls Assurance Analyst

?? We're Hiring: Analyst – Security Program Strategy & Controls Assurance

?? Location: Vienna, VA

? Duration: 7+ Months (Possibility of Extension)

We are seeking an experienced Information Security Controls Assurance Analyst to support IT and Information Security control assessments within an Agile environment.

The ideal candidate will have hands-on experience in control testing, information security risk assessments, and audit, with the ability to independently plan, execute, document, and report control assessments.

?? Key Responsibilities:

• Plan and scope asset-based control assessments, including developing risk and control matrices, scope documents, and assessment communications.
• Conduct walkthroughs with business partners to evaluate actual versus expected controls.
• Develop and execute testing strategies to assess IT and Information Security controls.
• Document testing procedures and results in accordance with IIA reperformance standards.
• Identify and document control gaps, issues, and assessment findings.
• Prepare final assessment reports and present results to leadership.
• Collaborate with business partners, management, stakeholders, and third parties throughout the assessment lifecycle.

?? Required Qualifications:

• Hands-on experience in IT/Security control testing across one or more of the Three Lines of Defense (Audit, ERM, or First-Line functions).
• Experience in internal audit and Information Security risk assessments.
• Knowledge of regulatory requirements and security frameworks, including:
• NIST Cybersecurity Framework and NIST 800 Series
• FFIEC, NCUA, and GLBA
• ISO 27001/27002
• PCI DSS and SANS/CIS Controls
• Strong analytical, research, problem-solving, and organizational skills.
• Excellent verbal and written communication skills, including technical documentation and reporting.
• Ability to engage with stakeholders at all organizational levels and present assessment findings effectively.
• Bachelor's degree in Business, Information Systems, or a related field, or equivalent work/military experience.

?? Preferred Certifications:

CISSP | CISA | CCSP | CRISC | Other relevant Information Security certifications.

Interested candidates can apply by sharing their updated resumes through LinkedIn.