Controls Analyst

This is a contract position.This person will work a hybrid schedule, with 3 days onsite in Vienna, VA.In this role, you will:The Analyst will serve in an Asset Based Testing role that will help plan, scope, execute, and report testing of IT and Information Security controls.The Analyst will be responsible for all phases of the assessment and communications with business partners and other stakeholders.Planning & Scoping of Asset Based Assessments to include development of communications, risk & control matrices, scope documents and other supporting informationPerform walk-throughs with business partners identifying actual versus expected controlsCreate test strategies to test actual controlsDocument all work performed to meet the IIA reperformance standardDocument issues and final reportsPresent to leadership results of assessmentsThey will work in an Agile environment.Any other duties as assigned to support the programThe skills we are looking for in this role include:Experience in control testing to include experience in some of the three lines of defense (Audit, ERM, First Line areas)Experience in audit and information security risk assessmentsKnowledge of applicable federal and state laws, rules and regulations (i.e. Federal Financial Institutions Examination Manual (FFIEC), National Information of Standards and Technology (NIST), and International Standards Organization (ISO)Knowledge of NCUA, FFIEC, GLBA, NIST (including the Cyber Security Framework and 800 Series), ISO 27001/27002, SANS/CIS 20, PCI DSS, and other Information Security requirements and frameworksBachelor Degree in business, information systems or related field or equivalent work/military experienceCISSP, CISA, CCSP, CRISC or other Information Security certificationsExperience in working with all levels of staff, management, stakeholders, and third partiesEffective planning and organizational skillsEffective research, analytical and problem solving skillsStrong verbal, written and interpersonal communication skills, including technical writing