Risk Analyst (Controls)

Job Description

Risk Analyst – Contract – Vienna, VA/Hybrid – $40.00 - $47/hr.

\n

The final salary or hourly wage, as applicable, paid to each candidate/applicant for this position is ultimately dependent on a variety of factors, including, but not limited to, the candidate’s/applicant’s qualifications, skills, and level of experience as well as the geographical location of the position.

\n

\n

Applicants must be legally authorized to work in the United States. Sponsorship not available.

\n

\n

Our client is seeking Risk Analyst in Vienna, VA/Hybrid.

\n

\n

ROLE DESCRIPTION

\n

\n

Seeking a Security Controls Assurance / IT Risk Analyst with experience performing security controls testing, IT audits, risk assessments, and compliance testing. Must have strong knowledge of NIST, FFIEC, ISO 27001, PCI-DSS, and other security frameworks. Looking for candidates from IT Audit, GRC, Internal Audit, or Information Security Risk backgrounds who can plan assessments, perform walkthroughs, test controls, document findings, and present results to leadership. Preferred certifications include CISA, CISSP, CRISC, or CCSP.

\n

\n

Analyst, Security Program Strategy Controls

\n

Assurance

\n

\n

Basic Purpose

\n

The Analyst will serve in an Asset Based Testing role that will help plan, scope, execute, and report testing of IT and

\n

Information Security controls. The Analyst will be responsible for all phases of the assessment and communications

\n

with business partners and other stakeholders. They will work in an Agile environment.

\n

\n

Responsibilities

\n

• Planning & Scoping of Asset Based Assessments to include development of communications, risk & control

\n

matrices, scope documents and other supporting information

\n

• Perform walk-throughs with business partners identifying actual versus expected controls

\n

• Create test strategies to test actual controls

\n

• Document all work performed to meet the IIA reperformance standard

\n

• Document issues and final reports

\n

• Present to leadership results of assessments

\n

• Any other duties as assigned to support the program

\n

\n

Qualifications

\n

• Experience in control testing to include experience in some of the three lines of defense (Audit, ERM, First Line

\n

areas)

\n

• Experience in audit and information security risk assessments

\n

• Knowledge of applicable federal and state laws, rules and regulations (i.e. Federal Financial Institutions

\n

Examination Manual (FFIEC), National Information of Standards and Technology (NIST), and International

\n

Standards Organization (ISO)

\n

• Knowledge of NCUA, FFIEC, GLBA, NIST (including the Cyber Security Framework and 800 Series), ISO

\n

27001/27002, SANS/CIS 20, PCI DSS, and other Information Security requirements and frameworks

\n

• Experience in working with all levels of staff, management, stakeholders, and third parties

\n

• Effective planning and organizational skills

\n

• Effective research, analytical and problem solving skills

\n

• Strong verbal, written and interpersonal communication skills, including technical writing

\n

• Bachelor Degree in business, information systems or related field or equivalent work/military experience

\n

• CISSP, CISA, CCSP, CRISC or other Information Security certifications

\n

• Ability to present findings and conclusions clearly and concisely

\n

• Experience in working with all levels of staff, management, stakeholders, and third parties

\n

• Ability to build effective relationships through rapport, trust, diplomacy, and tact

\n

• Strong word processing and spreadsheet software skills

\n

\n

Bank Secrecy Section

\n

Remains cognizant of and adheres to banking/credit union policies, procedures and regulations pertaining to the Bank

\n

Secrecy Act.

\n

\n

\n

Benefits/Other Compensation

\n

Medical, Dental, Life Insurance, 401K.

\n

\n

Why Hays?

\n

\n

You will be working with a professional recruiter who has intimate knowledge of the industry and market trends. Your Hays recruiter will lead you through a thorough screening process in order to understand your skills, experience, needs, and drivers. You will also get support on resume writing, interview tips, and career planning, so when there’s a position you really want, you’re fully prepared to get it.

\n

\n

Nervous about an upcoming interview? Unsure how to write a new resume?

\n

\n

Visit the Hays Career Advice section to learn top tips to help you stand out from the crowd when job hunting.

\n

\n

Hays is committed to building a thriving culture of diversity that embraces people with different backgrounds, perspectives, and experiences. We believe that the more inclusive we are, the better we serve our candidates, clients, and employees. We are an equal employment opportunity employer, and we comply with all applicable laws prohibiting discrimination based on race, color, creed, sex (including pregnancy, sexual orientation, or gender identity), age, national origin or ancestry, physical or mental disability, veteran status, marital status, genetic information, HIV-positive status, as well as any other characteristic protected by federal, state, or local law. One of Hays’ guiding principles is ‘do the right thing’.

\n

We also believe that actions speak louder than words.

\n

In that regard, we train our staff on ensuring inclusivity throughout the entire recruitment process and counsel our clients on these principles. If you have any questions about Hays or any of our processes, please contact us.

\n

\n

In accordance with applicable federal, state, and local law protecting qualified individuals with known disabilities, Hays will attempt to reasonably accommodate those individuals unless doing so would create an undue hardship on the company. Any qualified applicant or consultant with a disability who requires an accommodation in order to perform the essential functions of the job should call or text View phone number on ziprecruiter.com.

\n

\n

Drug testing may be required; please contact a recruiter for more information.

\n

\n

#LI-DNI