W-2 only | IT RISK & CONTROL SENIOR ANALYST

Please Note:

• This is a W-2 employment opportunity only.
• No third-party agencies, recruiters, or C2C candidates. Please do not apply.

Locations: Charlotte, NC | Jersey City, NJ | NYC, NyY

WHAT IS THE OPPORTUNITY?

The IT Risk Senior Analyst is a subject-area specialist with specialized training, methods, and analytic techniques to create recommendations and directions for cyber risk mitigation in a complex technical environment.

The ITRM Security Senior Analyst will conduct fit-for-purpose reviews and challenges of internal IT controls to ensure consistency with internal policies and standards. Additionally, the role will conduct Process/Risk/Control (PRC) reviews to evaluate overall control program effectiveness in mitigating risk.

The ITRM Senior Analyst''s goal is to create actionable information for IT and business leadership and to provide objective assessments of cybersecurity controls for auditors, regulators, and external parties. This requires routinely performing review and challenge assessments against 1LOD testing practices specific to Technology & Innovation (T&I) controls, authoring detailed reports, and gathering metrics to ensure stakeholders receive accurate and complete information.

The ITRM Senior Analyst keeps abreast of external cybersecurity trends, technologies, and cyber risk management approaches, and frequently collaborates with other teams on cyber risk-related initiatives to provide subject matter expertise, recommendations, and guidance that align with the bank''s overall risk appetite.

This is an advanced senior professional with a wide range of experience who uses professional concepts to resolve complex issues in creative and effective ways. Serves as an expert in their discipline or area of specialization and works on complex issues where analysis of situations or data requires an in-depth evaluation of variable factors.

WHAT WILL YOU DO?

• Perform fit-for-purpose reviews and challenges specific to IT (T&I) controls tested by the 1LOD Testing team against Governing Principles and applicable Policies and Standards.
• Review Test of Design (ToD) and Test of Effectiveness (ToE) documentation.
• Provide guidance to 1LOD colleagues to ensure testing practices meet internal standards.
• Conduct Process/Risk and Control (PRC) reviews against IT control descriptions to ensure they meet requirements.
• Support regulatory requirements and deliverables as needed.
• Define analysis objectives, collect data from internal and external sources, and evaluate/analyze data to provide objective information on cyber risks for IT and business management through both summary and detailed reporting.
• Participate in other projects and duties as assigned.

WHAT DO YOU NEED TO SUCCEED?

Required Qualifications

• Bachelor''s Degree or equivalent experience.
• Minimum 12 years of experience in Information Security/Cybersecurity.
• Minimum 6 years of experience in one or more of the following:
  • Cybersecurity Operations
  • Incident Response
  • IT Risk Management
  • Investigations

Preferred Qualifications

• Demonstrated experience analyzing IT control testing attributes and supporting evidence to properly evaluate and conclude control effectiveness.
• Prior IT Control Audit experience strongly preferred.
• Experience in the banking or financial services industry, specifically in technology, strongly preferred.
• Demonstrated knowledge of financial regulations and control frameworks applicable to cybersecurity or IT risk.
• Experience with industry frameworks such as FAIR, NIST CSF, or similar assessment frameworks.
• Strong understanding of the cybersecurity landscape, including threats, trends, and technologies.
• Excellent communication and interpersonal skills, with the ability to build positive professional relationships with internal stakeholders.
• Strong team-oriented mindset and commitment to providing excellent customer service.