Analyst Cyber Audit and Assurance

Federal Farm Credit Banks Funding Corporation•Jersey City, NJ

12d•$85,000 - $100,000•Hybrid

About The Position

This role ensures the efficacy of the cyber security and IT general controls. The individual with this responsibility will implement control monitoring practices, monitor for control failures, provide evidence of control implementation where required, and determine where control improvements might be implemented. This role will provide support to the Cyber Security and IT teams to improve our control posture through monitoring, review, and recommended improvements. This role will also assist with any audits of the Funding Corporation’s control environment. The Cyber Audit and Assurance Analyst will report to the Chief Information Security Officer (CISO).

Requirements

Bachelor’s degree in cyber security, information systems, accounting, risk management, business, or a related field; equivalent relevant experience may be considered
Up to two years of relevant experience in cyber security, technology risk, compliance, internal audit, or IT operations, including internships or cooperative education experience
Foundational knowledge of cyber security controls and GRC concepts
Basic understanding of IT general control processes, for example, change management, vulnerability management, and others
Ability to document processes, evaluate control design and operation, maintain evidence, identify exceptions, and track remediation activities with guidance
Strong analytical, organizational, and problem-solving skills, with attention to detail and the ability to manage multiple assignments and deadlines
Clear written and verbal communication skills and the ability to work collaboratively with cyber security, IT, risk, compliance, and audit stakeholders
Proficiency with Microsoft Excel, Word, and PowerPoint

Nice To Haves

familiarity with NIST Cybersecurity Framework, NIST SP 800-53, CIS Controls, COBIT, or similar frameworks is preferred
experience with GRC, ticketing, reporting, or data visualization tools is a plus

Responsibilities

Create a methodology for monitoring adherence to cyber security and IT general controls with support from Cyber Security and IT team members
Perform control monitoring according to the method chosen
Recommend and implement improvements to both the controls themselves and the monitoring practices
Provide evidence of control implementation to leadership and audit
Engage with the audit team to create a more seamless audit process
Automate or improve the evidence collection process