Senior Business Analyst - Third-Party Risk & Information Security

Job Description:

Job Title: Senior Business Analyst - Third-Party Risk & Information Security

Location : McLean, VA (5 days/week at office - Onsite)

Type: Contract to Hire

Must Have Skills:

• Strong expertise in third-party risk management, information security, and operational risk.
• Advanced skills in spreadsheet formulas, Excel automation, and financial statement analysis.
• knowledge of SOC reviews (including SOC 1 Type 2), controls, and enhancements is essential.
• Mortgage industry experience.
• Experience in IT audit is a nice-to-have.

Job Description :

Our client is seeking an experienced Senior Business Analyst with expertise in third-party risk management, information security, and operational risk. The ideal candidate will have strong business and technical analysis skills, advanced Excel capabilities, knowledge of SOC reviews, and experience supporting end-to-end testing activities.

Responsibilities

• Gather and analyze business requirements and translate them into technical specifications.
• Design and document business processes, data flows, and project objectives.
• Conduct feasibility analysis and support development, system integration testing, and user acceptance testing (UAT).
• Create and document UAT strategies, test plans, test cases, and test scripts.
• Support third-party risk assessments, SOC reviews, control evaluations, and process enhancements.
• Perform data analysis using advanced Excel formulas, automation, and financial statement analysis.

Qualifications

• Strong expertise in third-party risk management, information security, and operational risk.
• Advanced Excel skills, including spreadsheet formulas and automation, along with financial statement analysis experience.
• Knowledge of SOC reviews, particularly SOC 1 Type 2, controls, and control enhancements.
• Experience in business analysis, requirements gathering, process and data flow design, and technical specification development.
• Ability to translate business requirements into technical requirements, define project objectives, and conduct feasibility analysis.
• Experience supporting development activities, systems integration testing, and user acceptance testing (UAT).
• Proven ability to create and document UAT test strategies, test plans, test cases, and test scripts.
• Knowledge of manual and automated testing methodologies.
• Excellent communication, analytical, documentation, and problem-solving skills.
• Experience in IT audit is a plus.