Supports the development and execution of QA processes to ensure the effectiveness of IT risk controls, cybersecurity measures, and regulatory compliance frameworks.
Conducts independent testing and validation of IT risk management policies, standards and controls to ensure alignment with FFIEC, NIST, GLBA, SOX, PCI-DSS, and other industry regulations.
Performs control testing, improve risk monitoring and foster a culture of continuous improvement in the IT Risk Management space.
Performs controls testing including walkthroughs, design, and operating effectiveness testing per the Bank’s Enterprise Risk Management (ERM) Management Control Monitoring Program guidelines.
Assists IT Control owners to obtain issue remediation action plans, track and report status of remediation actions, including maintaining dialogue with the business to ensure timely remediation of issues.
Compiles, manages, submits and socializes required monthly, quarterly or annual reporting including test results, dashboards and/or testing issue remediation status.
Assists IT Risk Management with performing root cause analysis on control failures and recommend corrective actions to management.
Assists with control projects, operational and/or IT risk initiatives, where directed. It is the responsibility of this role to take ownership of all tasks and challenges that they encounter in the operation of their assigned position.

Bachelor’s in Information Technology, Computer Science, Risk Management, or related field or equivalent work experience.
Minimum Experience 3 years of IT governance, IT risk, or IT Internal audit experience in banking or financial services.
At least 1 year in IT field (preferred)
High level Understanding of assurance-based activities including Information Technology controls related to Job Scheduling, Access and Change Management testing
Strong computer skills (Microsoft Word, Excel, and PowerPoint)
Current working knowledge of risks related to IT General Controls (ITGCs), application controls, IT platforms and related technologies.
Highly organized with exceptional attention to detail and follow-through.
Excellent stakeholder management, with the ability to engage with IT stakeholders.
Knowledge of distributed platforms, operating systems, databases, network systems, web-based technology, infrastructure, and IT security tools and techniques.
Task management and adaptability.

Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Senior IT Risk QA Analyst

Key skills