Technology Risk & Control Analyst - Senior /Specialist

Key Responsibilities

• Continuous Monitoring & Alert Management:

• Monitor control performance, security alerts, and compliance dashboards

   related to applications built on

  Distributed Ledger Technology (DLT)/Blockchain

   and deployed within

  AWS environments

  .
• Analyze alerts and findings to identify potential

  control drift

   or emerging vulnerabilities within cryptographic key management, smart contracts, and cloud security configurations (e.g., IAM, network access).

• Evidence Gathering and Compliance Evaluation:

• Work directly with

  Engineering and Operations teams

   to

  gather and validate evidence

   demonstrating control effectiveness (e.g., access logs, configuration files, change records).
• Evaluate gathered evidence against established policies, control procedures, and regulatory requirements to

  ensure compliance

   is consistently met.
• Document and track control deficiencies, ensuring all necessary remediation steps are clearly defined and followed through to completion.

• Audit and Regulatory Liaison:

• Act as the primary

  liaison between Technology and Audit/Compliance teams

   for applications under your scope.

• Prepare audit documentation, control narratives, and evidence packages

   for internal, external, and regulatory examinations.
• Facilitate audit fieldwork, answer auditor inquiries, and manage follow-ups on findings and recommendations.

• Reporting and Communication:

• Prepare and deliver

  regular status reports to senior leadership

   and management on the current technology risk posture, control effectiveness, and status of outstanding issues or audit findings.
• Communicate clearly and concisely with both technical and non-technical stakeholders regarding control requirements, risk issues, and compliance obligations.

• Experience & Knowledge:

• 4+ years of experience in

  Technology Risk Management, IT Audit, Information Security, or IT Compliance

  , preferably within the financial services industry.
• Foundational understanding of risk management principles, controls testing, and evidence collection methodologies.
• Familiarity with the security concepts of

  AWS cloud services

   (e.g., VPC, S3, EC2, IAM) and a basic grasp of their associated risks.
• Basic understanding of

  Blockchain/DLT concepts

   (e.g., decentralized nature, immutability, smart contracts) and their control considerations.

• Technical & Analytical Skills:

• Proven ability to analyze technical information (logs, reports, configurations) to assess control compliance.
• Proficient in using standard tools for issue tracking, documentation, and reporting.

• Communication:

• Excellent written and verbal communication skills, with the ability to clearly articulate technical control status and audit requirements to diverse audiences.
• Experience working directly with

  DevOps/Agile engineering teams

   to embed control monitoring.
• Knowledge of specific financial regulatory requirements (e.g., SOX, GLBA, NYDFS) as they apply to cloud and emerging technologies.
• Relevant certifications such as

  CISA, CRISC, CompTIA Security+, or AWS Certified Cloud Practitioner

  .