CBGC Senior Control Testing Analyst

About the role

The Consumer Banking Governance and Controls (CBGC) Sr. Control Testing Analyst role is responsible for planning and executing independent testing of internal controls to evaluate design and operating effectiveness and support a strong internal control environment.

Responsibilities

• Execute control testing in accordance with the enterprise internal controls testing methodology, ensuring the tester remains independent from the control owner (as appropriate).
• Perform control walkthroughs and obtain an end-to-end understanding of process flows, risks, and control intent prior to testing.
• Develop test steps and test questions tailored to the control design, frequency, population, and systems of record.
• Perform testing using appropriate methods (inquiry, observation, inspection, and/or reperformance), with inspection and reperformance preferred when feasible.
• Validate that controls are performed consistently as designed and that results support clear conclusions on control effectiveness.

Qualifications

• Bachelor’s degree in Business, Finance, Accounting, Risk Management, Information Systems, or a related field.
• Minimum of five (5) years of progressive experience in monitoring and testing, internal controls, compliance testing, audit, operational risk, quality assurance/quality control; credit union or retail banking experience required.
• Demonstrated experience developing test procedures, executing control tests, and documenting workpapers/evidence that are clear, complete, and defensible.
• Working knowledge of internal controls concepts and testing approaches (inquiry, observation, inspection, reperformance), including sampling and evidence evaluation.
• Experience supporting issue management and remediation governance, including retesting/validation activities.
• Proficiency with Microsoft Office (advanced Excel).
• Experience with GRC tools (e.g., Archer), workflow/case tools, and reporting/dashboard tools (e.g., Power BI/Tableau).
• Training or practical experience with controls frameworks and risk assessment practices (e.g., COSO, RCSA) and issue management lifecycle practices, required.
• Experience using A.I. tools preferred.