> Markdown version of [/jobs/ext/4632782-security-controls-analyst](https://www.wearedevelopers.com/jobs/ext/4632782-security-controls-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Controls Analyst

- **Company:** Insight Global
- **Location:** McKinney, TX, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Cloud Computing Security, CompTIA Security+, Identity and Access Management, Information Technology Audit, Network Security, Software Vulnerability Management, IT General Controls (ITGC), RSA Archer Platform, CIS Benchmarks
- **Published:** November 8, 2026
- **Apply:** https://www.techcareers.com/job.asp?id=3505249510&tx=IT8477TTZ&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54

## About the Role

* 5+ years of cybersecurity GRC, IT Risk, IT Audit, or security controls experience
 * Strong experience designing and creating net-new cybersecurity controls
 * Experience translating cybersecurity standards into clear, testable controls
 * Hands-on experience with design effectiveness and operating effectiveness testing
 * Ability to review technical processes, evidence, samples, exceptions, and control gaps
 * Experience working directly with technical IT SMEs and control owners
 * Experience independently driving controls from design through testing and completion
 * Technical knowledge across IAM, cloud security, cryptography, network security, vulnerability management, and data protection
 * Knowledge of NIST, FFIEC, CIS Controls, ISO 27001, or SOX ITGC
 * Financial services or highly regulated industry experience
 * CISA, CISSP, CISM, CRISC, Security+, or similar certification
 * Experience with Archer or similar GRC platforms

## Description

The IT Risk QA Senior Analyst will support the IT Risk & Governance team by translating established cybersecurity standards into net-new, testable security controls. This person will work directly with technical IT SMEs to understand processes, recommend and design appropriate controls, and independently test those controls for both design and operating effectiveness. This is a hands-on technical controls role, not an audit coordination or document collection position