Asset Based Testing Analyst (Hybrid)

Responsibilities

• Planning and scoping of Asset Based Assessments, including development of communications, risk and control matrices, scope documents, and other supporting information
• Perform walk-throughs with business partners to identify actual versus expected controls
• Create test strategies to test actual controls
• Document all work performed to meet the IIA reperformance standard
• Document issues and final reports
• Present assessment results to leadership
• Perform other duties as assigned to support the program

Qualifications

• Experience in control testing, including experience in one or more of the three lines of defense (Audit, ERM, First Line areas)
• Experience in audit and information security risk assessments
• Knowledge of applicable federal and state laws, rules, and regulations, including FFIEC, NIST, and ISOK
• Knowledge of NCUA, FFIEC, GLBA, NIST (including the Cybersecurity Framework and 800 Series), ISO 27001/27002, SANS/CIS 20, PCI DSS, and other information security requirements and frameworks
• Experience working with all levels of staff, management, stakeholders, and third parties
• Effective planning and organizational skills
• Effective research, analytical, and problem-solving skills
• Strong verbal, written, and interpersonal communication skills, including technical writing
• Bachelor’s degree in business, information systems, or a related field, or equivalent work/military experience
• CISSP, CISA, CCSP, CRISC, or other Information Security certification
• Ability to present findings and conclusions clearly and concisely
• Ability to build effective relationships through rapport, trust, diplomacy, and tact
• Strong word processing and spreadsheet software skills

Benefits

• Comprehensive Medical, Dental, and Vision Insurance
• Employer-Paid Life Insurance
• Employer-Paid Short-Term and Long-Term Disability Insurance
• 401(k)
• Paid Time Off (PTO) that includes Vacation Leave, Sick Leave, and 11 Paid Holidays