Technology Risk Analyst, Controls Testing CoE

Fidelity Investments • Westlake, TX

2d

About The Position

The Technology Risk Analyst role supports key testing activities that help protect Fidelity’s customers, employees, and brand. This role provides hands-on exposure to technology controls testing, industry frameworks, and cross-functional partnership in a highly regulated environment. The team is part of Fidelity’s Enterprise Technology Risk organization within the Legal, Risk, and Compliance function. The Technology Risk Controls Testing team coordinates and executes controls testing across a wide range of technology environments, including both manual and automated approaches. They partner closely with Corporate Audit, Enterprise Compliance, Information Security, Operational Risk, and technology and business owners to proactively assess and monitor technology risk. The team's purpose is to provide consistent, high-quality assurance over technology controls that support Fidelity’s regulatory obligations and commitment to operational resilience.

Requirements

• Bachelor’s degree in computer science, technology, or a related field (preferred)
• 2 to 5 years of relevant experience in IT, technology risk, cybersecurity, controls, cloud, audit, or related roles
• Experience supporting or performing control assessments within complex technology environments
• Familiarity with risk and control frameworks such as NIST, COBIT, ISO 27001, AICPA Trust Principles, HITRUST, or similar
• Working knowledge of cloud and technology control concepts across infrastructure, applications, identity and access, and cybersecurity domains
• Exposure to GRC platforms such as Archer (preferred)
• Professional certifications (CISA, CISSP, CRISC, CISM) desirable but not required
• Solid understanding of control concepts and industry standards
• Apply structured problem-solving approaches
• Work effectively within defined procedures
• Communicate professionally
• Collaborate well across teams
• Comfortable learning from more experienced analysts while taking ownership of assigned work

Nice To Haves

• Bachelor’s degree in computer science, technology, or a related field
• Exposure to GRC platforms such as Archer
• Professional certifications (CISA, CISSP, CRISC, CISM)

Responsibilities

• Supporting and executing technology risk and controls testing activities aligned with audit, regulatory, and certification requirements
• Assessing control design and operating effectiveness using established methodologies and frameworks
• Analyzing testing results to identifying control gaps, inconsistencies, or potential risks
• Coordinating with technology and business partners to gathering evidence and understanding control execution
• Documenting testing results clearly and maintaining defensible workpapers for audit review
• Assisting with remediation tracking and monitoring corrective action progress

Benefits

• Fidelity will not provide immigration sponsorship for this position.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 101-250 employees