Job Description
Risk Business Analyst
Location: Vienna, VA (Hybrid)
Pay Rate: Open to Both C2C and W2 options
Position Type: Contract
The Analyst will serve in an Asset Based Testing role that will help plan, scope, execute, and report testing of IT and Information Security controls. The Analyst will be responsible for all phases of the assessment and communications with business partners and other stakeholders. They will work in an Agile environment.
Responsibilities:
• Planning & Scoping of Asset Based Assessments to include development of communications, risk & control matrices, scope documents and other supporting information
• Perform walk-throughs with business partners identifying actual versus expected controls
• Create test strategies to test actual controls
• Document all work performed to meet the IIA reperformance standard
• Document issues and final reports
• Present to leadership results of assessments
• Any other duties as assigned to support the program
Qualifications:
• Experience in control testing to include experience in some of the three lines of defense (Audit, ERM, First Line areas)
• Experience in audit and information security risk assessments
• Knowledge of applicable federal and state laws, rules and regulations (i.e. Federal Financial Institutions Examination Manual (FFIEC), National Information of Standards and Technology (NIST), and International Standards Organization (ISO)
• Knowledge of NCUA, FFIEC, GLBA, NIST (including the Cyber Security Framework and 800 Series), ISO 27001/27002, SANS/CIS 20, PCI DSS, and other Information Security requirements and frameworks
• Experience in working with all levels of staff, management, stakeholders, and third parties
• Effective planning and organizational skills
• Effective research, analytical and problem solving skills
• Strong verbal, written and interpersonal communication skills, including technical writing
• Bachelor Degree in business, information systems or related field or equivalent work/military experience
• CISSP, CISA, CCSP, CRISC or other Information Security certifications
• Ability to present findings and conclusions clearly and concisely
• Experience in working with all levels of staff, management, stakeholders, and third parties
• Ability to build effective relationships through rapport, trust, diplomacy, and tact
Ref: #851-Rockville-S1
Location: Vienna, VA (Hybrid)
Pay Rate: Open to Both C2C and W2 options
Position Type: Contract
The Analyst will serve in an Asset Based Testing role that will help plan, scope, execute, and report testing of IT and Information Security controls. The Analyst will be responsible for all phases of the assessment and communications with business partners and other stakeholders. They will work in an Agile environment.
Responsibilities:
• Planning & Scoping of Asset Based Assessments to include development of communications, risk & control matrices, scope documents and other supporting information
• Perform walk-throughs with business partners identifying actual versus expected controls
• Create test strategies to test actual controls
• Document all work performed to meet the IIA reperformance standard
• Document issues and final reports
• Present to leadership results of assessments
• Any other duties as assigned to support the program
Qualifications:
• Experience in control testing to include experience in some of the three lines of defense (Audit, ERM, First Line areas)
• Experience in audit and information security risk assessments
• Knowledge of applicable federal and state laws, rules and regulations (i.e. Federal Financial Institutions Examination Manual (FFIEC), National Information of Standards and Technology (NIST), and International Standards Organization (ISO)
• Knowledge of NCUA, FFIEC, GLBA, NIST (including the Cyber Security Framework and 800 Series), ISO 27001/27002, SANS/CIS 20, PCI DSS, and other Information Security requirements and frameworks
• Experience in working with all levels of staff, management, stakeholders, and third parties
• Effective planning and organizational skills
• Effective research, analytical and problem solving skills
• Strong verbal, written and interpersonal communication skills, including technical writing
• Bachelor Degree in business, information systems or related field or equivalent work/military experience
• CISSP, CISA, CCSP, CRISC or other Information Security certifications
• Ability to present findings and conclusions clearly and concisely
• Experience in working with all levels of staff, management, stakeholders, and third parties
• Ability to build effective relationships through rapport, trust, diplomacy, and tact
Ref: #851-Rockville-S1
Numbers & Facts
| Location | Merrifield, VA |
| Industry | Staffing/Employment Agencies |
| Company Size | 2,500 to 4,999 employees |
| Website | https://systemone.com |
About Company
Every day, System One focuses on services and solutions that require a high degree of specialization, in-demand technical skills, and large-scale operational expertise. We are essential partners to those on the front lines of our nation’s most critical infrastructure, technology, and life sciences initiatives.
Founded more than 40 years ago as a staffing partner to the engineering industry, today System One is a diversified organization operating in over 50 locations and putting more than 9,000 people to work in the United States, Canada, and the United Kingdom.
Skills
- Agile Programming Methodologiesunmatched
- Analysis Skillsunmatched
- Business Analysisunmatched
- CCSP - Cisco Certified Security Professionalunmatched
- CISA - Certified Information Systems Auditorunmatched
- CISSP - Certified Information Systems Security Professionalunmatched
- Communication Skillsunmatched
- Computer Securityunmatched
- Federal Laws and Regulationsunmatched
- ISO (International Organization for Standardization)unmatched
- Information Technology & Information Systemsunmatched
- Information/Data Security (InfoSec)unmatched
- Institute of Internal Auditors (IIA)unmatched
- Internet Securityunmatched
- Interpersonal Skillsunmatched
- Leadershipunmatched
- Militaryunmatched
- Organizational Skillsunmatched
- PCI-DSSunmatched
- People Managementunmatched
- Presentation/Verbal Skillsunmatched
- Problem Solving Skillsunmatched
- Risk Analysisunmatched
- Risk Control Matrixunmatched
- Security Analysisunmatched
- Security Auditingunmatched
- Standards Organizationsunmatched
- State Laws and Regulationsunmatched
- Strategic Planningunmatched
- Support Documentationunmatched
- Technical Writingunmatched
- Test Strategyunmatched
- Testingunmatched
- U.S. National Institute of Standards and Technology (NIST)unmatched
- Web Application Frameworkunmatched
- Writing Skillsunmatched
Level up your application
Professional resume templates
Browse dozens of recruiter approved resume templates, layouts and formats. Choose your favorite and make it your own in minutes.
Free resume templatesFree resume builder
Improve your existing resume or start from scratch and create a standout, ATS-friendly resume. Add job-specific content, download and apply.
Free resume builder