Information Security Controls Assurance Analyst

n \n

• Plan and scope asset-based control assessments, including developing risk and control matrices, scope documents, and assessment communications. \n

• Conduct walkthroughs with business partners to evaluate actual versus expected controls. \n

• Develop and execute testing strategies to assess IT and Information Security controls. \n

• Document testing procedures and results in accordance with IIA reperformance standards. \n

• Identify and document control gaps, issues, and assessment findings. \n

• Prepare final assessment reports and present results to leadership. \n

• Collaborate with business partners, management, stakeholders, and third parties throughout the assessment lifecycle. \n

The ideal candidate will have hands-on experience in control testing, information security risk assessments, and audit, with the ability to independently plan, execute, document, and report control assessments., * Hands-on experience in IT/Security control testing across one or more of the Three Lines of Defense (Audit, ERM, or First-Line functions)., * Strong analytical, research, problem-solving, and organizational skills. \n

• Excellent verbal and written communication skills, including technical documentation and reporting. \n

• Ability to engage with stakeholders at all organizational levels and present assessment findings effectively. \n

• Bachelor’s degree in Business, Information Systems, or a related field, or equivalent work/military experience.