Asset Based Tester/Analyst

BRMi•, VA

1d•$85,000 - $91,000•Remote

About The Position

BRMi is seeking an Asset Based Tester/Analyst to support a large financial enterprise client. The Analyst will plan, scope, execute, and report testing of IT and Information Security controls, and will be responsible for all phases of assessments and communications with business partners and other stakeholders. The role works in an Agile environment. The position can be performed 100% remotely from West Virginia, Virginia, Maryland, Washington, DC, or Florida. High-profile roles may require candidates to fly to the customer headquarters for an in-person interview; expenses are paid. This is a W2 opportunity only. BRMi will not sponsor applicants for work visas. BRMi is an equal opportunity employer that values diversity and encourages qualified applicants regardless of personal characteristics. Employment and promotion decisions are based on merit, qualifications, performance, and business needs, and are made in a nondiscriminatory manner.

Requirements

Experience in control testing, including experience in some of the three lines of defense: Audit, ERM, or First Line areas.
Experience in audit and information security risk assessments.
Knowledge of applicable federal and state laws, rules, and regulations, including FFIEC, NIST, and ISO.
Knowledge of NCUA, FFIEC, GLBA, NIST (including the Cyber Security Framework and 800 Series), ISO 27001/27002, SANS/CIS 20, PCI DSS, and other Information Security requirements and frameworks.
Experience working with staff, management, stakeholders, and third parties at all levels.
Effective planning and organizational skills.
Effective research, analytical, and problem-solving skills.
Strong verbal, written, and interpersonal communication skills, including technical writing.
Bachelor's degree in business, information systems, or a related field, or equivalent work or military experience.
Ability to present findings and conclusions clearly and concisely.
Ability to build effective relationships through rapport, trust, diplomacy, and tact.
Strong word-processing and spreadsheet software skills.

Nice To Haves

CISSP, CISA, CCSP, CRISC, or other Information Security certifications.

Responsibilities

Plan and scope asset-based assessments, including developing communications, risk and control matrices, scope documents, and supporting information.
Conduct walkthroughs with business partners to identify actual versus expected controls.
Create test strategies to test actual controls.
Document work performed to meet the IIA reperformance standard.
Document issues and prepare final reports.
Present assessment results to leadership.
Perform other duties as assigned to support the program.