IT Control Testing Analyst

The IT Controls Testing Analyst will play a key role in executing hands-on control testing across the organization, beginning with IT and extending into other functional areas such as HR and Compliance. This role is heavily execution-focused, supporting a fast-paced testing cycle with a high volume of controls and tight timelines. The analyst will work closely with control owners, audit partners, and risk stakeholders to validate control design and effectiveness, document evidence, and support audit readiness., * Execute hands-on control testing across multiple processes, including change management, access management, vulnerability management, backup and recovery, and other core IT control domains

• Perform Risk and Control Self-Assessments (RCSA) by partnering with control owners to identify risks, document controls, and assess residual risk
• Collect, review, and validate evidence to assess control design and operating effectiveness
• Document testing results, issues, and remediation activities within ServiceNow IRM or a comparable GRC platform
• Track findings and corrective actions, ensuring timely follow-up and accurate documentation
• Support internal and external audit activities by preparing control documentation, evidence, and status updates
• Contribute to risk reporting, dashboards, and metrics used by management and governance stakeholders

• 3-5 years of experience in IT Risk Management, IT Controls, IT Audit, or GRC, with a strong emphasis on hands-on control testing
• Financial services industry experience with familiarity testing controls aligned to GLBA and FFIEC requirements
• Bachelor’s degree in Information Systems, Computer Science, Cybersecurity, or a related field
• Strong preference for experience using ServiceNow IRM or similar GRC platforms for control testing and issue management
• Working knowledge of GRC and IT control frameworks such as NIST CSF, ISO 27001, COBIT, FFIEC CAT, and GLBA/NYDFS
• Light SQL or data analysis experience to support evidence validation and updates (no heavy scripting required)
• Strong organizational and time-management skills with the ability to manage a high volume of testing activities under tight deadlines
• Clear written and verbal communication skills, with attention to accuracy and documentation quality

The Intersect Group is partnering with a well-established, highly regulated financial services organization that plays a critical role in supporting secure, compliant operations across the enterprise. This organization is known for its strong governance culture, collaborative teams, and commitment to meeting regulatory expectations through disciplined execution. The environment values accountability, transparency, and professionals who take pride in high-quality work.