Technology Risk Analyst, Controls Testing CoE

Fidelity•Westlake, TX

11h

About The Position

The Technology Risk Analyst will support key testing activities that help protect Fidelity’s customers, employees, and brand. This role provides hands-on exposure to technology controls testing, industry frameworks, and cross-functional partnership in a highly regulated environment. The role is within Fidelity’s Enterprise Technology Risk organization, specifically the Technology Risk Controls Testing team, which coordinates and executes controls testing across a wide range of technology environments using both manual and automated approaches. The team partners closely with Corporate Audit, Enterprise Compliance, Information Security, Operational Risk, and technology and business owners to proactively assess and monitor technology risk, ensuring consistent, high-quality assurance over technology controls that support Fidelity’s regulatory obligations and commitment to operational resilience.

Requirements

Bachelor’s degree in computer science, technology, or a related field (preferred)
2 to 5 years of relevant experience in IT, technology risk, cybersecurity, controls, cloud, audit, or related roles
Experience supporting or performing control assessments within complex technology environments
Familiarity with risk and control frameworks such as NIST, COBIT, ISO 27001, AICPA Trust Principles, HITRUST, or similar
Working knowledge of cloud and technology control concepts across infrastructure, applications, identity and access, and cybersecurity domains
Exposure to GRC platforms such as Archer (preferred)
Professional certifications (CISA, CISSP, CRISC, CISM) desirable but not required
Solid understanding of control concepts and industry standards
Ability to apply structured problem-solving approaches
Ability to work effectively within defined procedures
Professional communication skills
Ability to collaborate well across teams
Comfortable learning from more experienced analysts while taking ownership of assigned work

Nice To Haves

Bachelor’s degree in computer science, technology, or a related field
Exposure to GRC platforms such as Archer
Professional certifications (CISA, CISSP, CRISC, CISM)

Responsibilities

Supporting and executing technology risk and controls testing activities aligned with audit, regulatory, and certification requirements
Assessing control design and operating effectiveness using established methodologies and frameworks
Analyzing testing results to identify control gaps, inconsistencies, or potential risks
Coordinating with technology and business partners to gather evidence and understand control execution
Documenting testing results clearly and maintaining defensible workpapers for audit review
Assisting with remediation tracking and monitoring corrective action progress