Control Testing Specialist

Responsibilities

• Develop a thorough understanding of IT and cybersecurity control frameworks and regulations (e.g., NIST CSF, ISO 27001, CIS Controls, SOX)
• Participate in risk assessments to identify cybersecurity and IT control deficiencies and prioritize testing activities.
• Plan, design, and execute control testing procedures across cybersecurity domains such as (not limited to):
• Identity and Access Management (IAM) and Privileged Access Management (PAM)
• Network Security and Endpoint Protection
• Vulnerability and Patch Management
• Data Protection and Encryption Controls
• Incident Response and Security Monitoring
• Business Continuity and Disaster Recovery
• Change and Configuration Management
• Third-Party / Vendor Risk Management
• Independently design and execute test plans for ITGCs and ITACs, utilizing a variety of testing methodologies.
• Assess the effectiveness controls through a combination of stakeholder interviews, evidence reviews, and automated testing methodologies.
• Perform complex test procedures using automated tools and manual techniques, documenting the results comprehensively.
• Analyze test findings, identify control weaknesses, and recommend remediation actions.
• Collaborate with IT and business process owners to address control deficiencies and implement corrective actions.
• Experience in performing vendor security reviews covering cyber security domains
• Stay updated on emerging cybersecurity threats and control best practices.

Qualifications

• Bachelors degree in information technology, Computer Science, or a related field (or equivalent experience).
• 1-7 years of experience in Cybersecurity assessments, IT security, or a similar role with a focus on controls testing.
• Strong working knowledge of cybersecurity controls frameworks and IT control testing methodologies.
• Familiarity with tools like ServiceNow, Jira, or other GRC platforms.
• Experience in assessing and providing recommendations on the feasibility of automating manual control testing processes.
• Adaptability to manage a dynamic control population and evolving client needs.
• Excellent analytical and problem-solving skills.
• Strong communication, collaboration, and leadership skills.