Control Testing Consultant -FLOD

Responsibilities

• Evaluate industry standards and regulatory mandates to understand regulatory requirements applicable to IT and ensure alignment with internal frameworks.

• Assist in development of technology and information security governing documents, including policies, standards, and procedures aligned to regulatory and operational requirements.

• Support RCSA program and various technology process owners to identify risk within technology and information security, document controls, and evaluate control design and operating effectiveness.

• Support stakeholders on identification, documentation of issue details, root cause analysis, priority assessment, resolution planning, issue tracking and reporting, and issue closure.

• Facilitate development, management, and reporting of metrics to measure operational performance and monitor risks for technology and information security.

• Coordinate and facilitate evidence collection and response preparation for internal audits, external assessments, and regulatory examinations.

Qualifications

• Knowledge of financial rules, regulations, and compliance frameworks.

• Strong knowledge of technology and industry frameworks CIS).

• Strong knowledge of technology, cyber security, data management concepts and risks.

• Strong knowledge of technology and cyber security controls.

• Industry certification (CISA, CISSP) is a plus.

• Strong risk management and analytical skills.