Application Control Specialist

An employer is seeking an Application Control Specialist for a large financial client sitting in Charlotte, NC. This person will be completing administrative and non-technical tasks related to compliance deliverables and infrastructure requests for the applications they support. You will support vendors, development teams, and technology managers to ensure technical security, risk, and other compliance activities are completed on-time and per requirements. This person will partner closely with control functions, risk management and Global Information Security (GIS) and are familiar with the applicable policies, standards, LRRs, contacts and procedures so that the compliance deliverables are completed effectively and efficiently. Other responsibilities include:

• Works with multiple teams and managers at the program level, under the supervision from a more senior domain expert

• Ensure that risk, security, and other compliance deliverables are completed on time and per requirements for the applications they support.

• Complete administrative and non-technical tasks related to compliance deliverables (for example, access reviews, assessments, questionnaires, procedural requirements, and so on).

• Assist with audit exams and risk assessments for the applications.

• Track and support the technical security and risk activities performed by the development teams (i.e., remediation of nonpermitted technology or security vulnerabilities, technical recovery planning, disaster recovery exercises, and so on).

• Maintain data about the application in AppHQ and other systems of record.

• Work closely with vendors for vendor applications to ensure the application meets bank requirements.

• Assist with ad hoc inquiries and questions about the application.

• Interface with technology infrastructure teams for infrastructure requirements like requests for additional storage

• Understands all roles and responsibilities within their team and uses the tool sets within the software lifecycle.

• Basic awareness of products, services, business flows and strategy.

• Contributes to artifacts needed for governance forums. Understands stakeholder expectations and creates regular updates to keep stakeholders informed.

• Basic understanding of financial data and the impact that their role has within a team.

• Possesses knowledge of prior solutions to existing problems and applies them to solve similar problems.

• Facilitates team planning ceremonies against backlog/prioritized work.

• Manages risk/dependencies/impediments for one team.

• Ability to answer teams Agile/waterfall framework questions.

• Identifies risk/dependencies and quantifies the impact it has on the business/technology and what controls are to be used to resolve.

• Has knowledge of software development but has not been involved in hands on application development/coding.

• Basic knowledge of automation and continuous delivery practices. Ability to participate in their role and utilize necessary tools with minimal guidance.

• Possesses an understanding of architecture and bank standards. Participates in or supports delivery of architecture designs and implementations.

• 8-10 years of overall experience

• Track and support the technical security and risk activities performed by the development teams (i.e., remediation of nonpermitted technology or security vulnerabilities, technical recovery planning, disaster recovery exercises, and so on).

• Risk Management - Identifies risk/dependencies and quantifies the impact it has on the business/technology and what controls are to be used to resolve.

• Governance & Stakeholder Management - Contributes to artifacts needed for governance forums. Understands stakeholder expectations and creates regular updates to keep stakeholders informed.

• Scripting - XLS macros, shell scripts to manage data, reports.

• InfoSec background - Worked on log analysis, Audit & compliance, familiar with VA/PT results

• Infrastructure Background - Knowledge of Windows, Unix/Linux OS, Middleware

• Experience with AI tools - CoPilot