Risk & Controls Analyst

Risk & Controls Analyst

CGI is seeking a Risk Analyst to support the documentation, assessment, and testing of infrastructure and cloud technology controls within a financial services environment. This role will help create standardized control test plans, document design assessments, define evidence requirements, and support control testing across AWS-heavy cloud environments, with additional exposure to Azure and GCP. We partner with 15 of the top 20 banks globally, and our top 10 banking clients have worked with us for an average of 26 years! This role is located at a client site in Birmingham, AL, TX, Lafayette, LA, Knoxville, TN or Columbia, SC. A hybrid working model is acceptable.

The analyst will work closely with control owners to conduct walkthroughs, gather evidence, map controls to industry frameworks, and identify opportunities to improve testing, documentation, reporting, and dashboarding. The role also includes supporting automation and AI-enabled solutions for control documentation, test case generation, evidence review, and reporting activities.

Required qualifications to be successful in this role include: 5+ years of experience in risk management, internal controls, internal audit, compliance, technology risk, or controls testing. Strong background in technology risk, internal controls, internal audit, compliance, or controls testing. Hands-on experience documenting and testing technology or infrastructure controls. Working knowledge of cloud environments, especially AWS, with exposure to Azure and/or GCP. Ability to develop clear, repeatable control test plans, including design assessments, test cases, execution steps, and evidence requirements. Familiarity with common control and risk frameworks such as COSO, NIST, COBIT, ISO 27001, FFIEC, and SOX. Strong technical writing skills with the ability to translate control concepts into practical testing procedures. Experience conducting walkthroughs with control owners and gathering control evidence. Comfortable working in a financial services or other highly regulated environment. Proficiency with Microsoft Excel and reporting or dashboarding tools such as Power BI or Tableau. Ability to identify opportunities to streamline, automate, or improve control documentation and testing processes. Familiarity with GRC platforms such as Archer or ServiceNow GRC is preferred. Exposure to Generative AI, automation tools, or AI-assisted documentation/testing is a plus. Strong critical thinking, attention to detail, and problem-solving skills.

Desired Skillset: CISA, CRISC, AWS Cloud Practitioner, Azure Fundamentals, CCSK. Education: Bachelor's degree in Information Technology, Cybersecurity, Risk Management, Accounting, Business, or a related field.

Compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range for this role in the U.S. is $67,300.00 - $94,200.00. CGI's benefits are offered to eligible professionals on their first day of employment to include: competitive compensation, comprehensive insurance options, matching contributions through the 401(k) plan and the share purchase plan, paid time off for vacation, holidays, and sick time, paid parental leave, learning opportunities and tuition assistance, wellness and well-being programs.