Senior Business Analyst - Third-Party Risk & Information Security

Job Description

Job Description:

Job Title: Senior Business Analyst - Third-Party Risk & Information Security

Location : McLean, VA (5 days/week at office - Onsite)

Type: Contract to Hire

Must Have Skills:

\n
• Strong expertise in third-party risk management, information security, and operational risk.
\n
• Advanced skills in spreadsheet formulas, Excel automation, and financial statement analysis.
\n
• knowledge of SOC reviews (including SOC 1 Type 2), controls, and enhancements is essential.
\n
• Mortgage industry experience.
\n
• Experience in IT audit is a nice-to-have.
\n

Job Description :

Our client is seeking an experienced Senior Business Analyst with expertise in third-party risk management, information security, and operational risk. The ideal candidate will have strong business and technical analysis skills, advanced Excel capabilities, knowledge of SOC reviews, and experience supporting end-to-end testing activities.

Responsibilities

\n
• Gather and analyze business requirements and translate them into technical specifications.
\n
• Design and document business processes, data flows, and project objectives.
\n
• Conduct feasibility analysis and support development, system integration testing, and user acceptance testing (UAT).
\n
• Create and document UAT strategies, test plans, test cases, and test scripts.
\n
• Support third-party risk assessments, SOC reviews, control evaluations, and process enhancements.
\n
• Perform data analysis using advanced Excel formulas, automation, and financial statement analysis.
\n

Qualifications

\n
• Strong expertise in third-party risk management, information security, and operational risk.
\n
• Advanced Excel skills, including spreadsheet formulas and automation, along with financial statement analysis experience.
\n
• Knowledge of SOC reviews, particularly SOC 1 Type 2, controls, and control enhancements.
\n
• Experience in business analysis, requirements gathering, process and data flow design, and technical specification development.
\n
• Ability to translate business requirements into technical requirements, define project objectives, and conduct feasibility analysis.
\n
• Experience supporting development activities, systems integration testing, and user acceptance testing (UAT).
\n
• Proven ability to create and document UAT test strategies, test plans, test cases, and test scripts.
\n
• Knowledge of manual and automated testing methodologies.
\n
• Excellent communication, analytical, documentation, and problem-solving skills.
\n
• Experience in IT audit is a plus.
\n