Control Analyst (SDLC and Deployment Controls

Support Cybersecurity engineering and delivery teams in meeting the Bank’s software delivery requirements by driving adoption of SDLC and Deployment (DEPL) Controls.

• Monitor compliance and DevOps metrics, manage non-compliance and remediation activities.
• Provide training, guidance, and support as new controls and metrics are introduced.
• Define and promote good compliance practices for SDLC and DEPL Controls; coach teams and support remediation of gaps.
• Plan and execute spot-check processes for Cyber changes and applications, tracking outcomes and closure of actions.
• Assist teams in producing audit-ready evidence and maintain accurate compliance and regulatory reporting.
• Monitor DevOps metrics, identify trends or issues, and recommend corrective actions.
• Create and deliver training materials and communications to drive adoption of processes and controls.
• Facilitate workshops and working sessions with stakeholders to clarify requirements and resolve issues.
• Continuously improve workflows and documentation to simplify compliance for engineering teams.
• Collaborate with Cybersecurity project and product teams, Control Owners, Cyber Management, and risk/compliance partners.

Must have experience in Agile software delivery environments and a strong understanding of change delivery and governance processes.

• Strong stakeholder management, reporting, analysis, and communication skills required.
• Desirable: Experience with DevOps metrics, QA/testing tools, industry certifications, security testing concepts, and relevant software platforms (e.g., Jira, Confluence, ServiceNow).