ABA Testing Analyst - 17567

ABA Testing Analyst - IT & Information Security Controls

Position Title: ABA Testing Analyst - IT & Information Security Controls

Location: Vienna, VA - Hybrid (3 days onsite per week)

Clearance Requirements: None specified

Position Status: Contract

Pay Rate: $40.00-$43.00/hour

Position Description

Seneca Resources is seeking an ABA Testing Analyst to support Asset-Based Assessment (ABA) and testing activities across IT and Information Security controls. This role is ideal for an early-to-mid-career professional with experience in IT audit, cybersecurity risk, controls testing, information security assessments, or governance, risk, and compliance (GRC).

The analyst will support the full assessment lifecycle, including planning and scoping, control walkthroughs, test strategy development, evidence review, issue documentation, reporting, and communication with business partners and leadership. The successful candidate will be comfortable working in an Agile environment and collaborating with stakeholders across multiple levels of an organization.

Key Responsibilities

• Plan and scope Asset-Based Assessments, including developing communications, risk and control matrices, scope documents, and supporting assessment materials.

• Conduct control walkthroughs with business partners to identify actual versus expected control activities.

• Develop and execute control testing strategies to evaluate the effectiveness of IT and Information Security controls.

• Review and document testing evidence and work performed in accordance with applicable Internal Audit reperformance standards.

• Identify, document, and communicate control deficiencies, issues, risks, and observations.

• Prepare clear and concise assessment reports and supporting documentation.

• Present assessment results, findings, and conclusions to leadership and key stakeholders.

• Collaborate with business partners, management, control owners, third parties, and other stakeholders throughout the assessment lifecycle.

• Conduct research and analysis related to information security controls, regulatory requirements, and industry frameworks.

• Support additional testing, risk, compliance, and information security initiatives as assigned.

Required Skills/Education

• 1-5 years of experience in IT controls testing, IT audit, information security risk, cybersecurity assessments, GRC, or a related field.

• Experience with control testing and/or one or more areas of the Three Lines of Defense, including Internal Audit, Enterprise Risk Management (ERM), or First Line functions.

• Experience supporting IT audits, information security risk assessments, or cybersecurity control assessments.

• Knowledge of information security regulations, standards, and frameworks, including:

• NIST Cybersecurity Framework and NIST 800 Series

• FFIEC

• NCUA

• GLBA

• ISO 27001/27002

• CIS/SANS controls

• PCI DSS

• Strong understanding of IT and Information Security controls, risk management, compliance, and control assessment principles.

• Ability to work effectively with employees, management, business stakeholders, control owners, and third parties.

• Strong analytical, research, problem-solving, planning, and organizational skills.

• Excellent verbal and written communication skills, including technical writing and assessment reporting.

• Ability to present findings and recommendations clearly and concisely to leadership.

• Strong relationship-building skills, including the ability to establish trust, demonstrate diplomacy, and collaborate effectively.

• Proficiency with Microsoft Word, Excel, and other standard productivity tools.

• Bachelor's degree in Business, Information Systems, Cybersecurity, Information Technology, or a related field, or equivalent work/military experience.

• Relevant certifications such as CISA, CISSP, CCSP, CRISC, or other Information Security/GRC certifications are preferred.

Additional Requirement

• Maintain awareness of and comply with applicable organizational policies, procedures, and regulations related to the Bank Secrecy Act (BSA).

Work Authorization

Candidates must be authorized to work in the United States. Sponsorship is not available for this position.

Why This Opportunity?

This role offers an opportunity to build deeper expertise across IT controls testing, cybersecurity risk, information security compliance, audit, and GRC while working directly with business and technology stakeholders. Candidates who enjoy analyzing controls, identifying risks, communicating findings, and contributing to continuous improvement will be well positioned for success.

About Seneca Resources

At Seneca Resources, we are more than just a staffing and consulting firm, we are a trusted career partner. With offices across the U.S. and clients ranging from Fortune 500 companies to government organizations, we provide opportunities that help professionals grow their careers while making an impact.

When you work with Seneca, you're choosing a company that invests in your success, celebrates your achievements, and connects you to meaningful work with leading organizations nationwide. We take the time to understand your goals and match you with roles that align with your skills and career path.

Our consultants and contractors enjoy competitive pay, comprehensive health, dental, and vision coverage, 401(k) retirement plans, and the support of a dedicated team who will advocate for you every step of the way.

Seneca Resources is proud to be an Equal Opportunity Employer, committed to fostering a diverse and inclusive workplace where all qualified individuals are encouraged to apply.