JOB SUMMARY
This role ensures the efficacy of the cyber security and IT general controls. The individual with this responsibility will:
- Implement Control Monitoring practices
- Monitor for control failures
- Provide evidence of control implementation where required
- Determine where control improvements might be implemented
This role will provide support to the Cyber Security and IT teams to improve our control posture through monitoring, review, and recommended improvements. This role will also assist with any audits of the Funding Corporation's control environment. The Cyber Audit and Assurance Analyst will report to the Chief Information Security Officer (CISO).
JOB RESPONSIBILITIES:
- Create a methodology for monitoring adherence to cyber security and IT general controls with support from Cyber Security and IT team members
- Perform control monitoring according to the method chosen
- Recommend and implement improvements to both the controls themselves and the monitoring practices
- Provide evidence of control implementation to leadership and audit
- Engage with the audit team to create a more seamless audit process
- Automate or improve the evidence collection process
QUALIFICATIONS:
- Bachelor's degree in cyber security, information systems, accounting, risk management, business, or a related field; equivalent relevant experience may be considered
- Up to two years of relevant experience in cyber security, technology risk, compliance, internal audit, or IT operations, including internships or cooperative education experience
- Foundational knowledge of cyber security controls and GRC concepts; familiarity with NIST Cybersecurity Framework, NIST SP 800-53, CIS Controls, COBIT, or similar frameworks is preferred
- Basic understanding of IT general control processes, for example, change management, vulnerability management, and others
- Ability to document processes, evaluate control design and operation, maintain evidence, identify exceptions, and track remediation activities with guidance
- Strong analytical, organizational, and problem-solving skills, with attention to detail and the ability to manage multiple assignments and deadlines
- Clear written and verbal communication skills and the ability to work collaboratively with cyber security, IT, risk, compliance, and audit stakeholders
- Proficiency with Microsoft Excel, Word, and PowerPoint; experience with GRC, ticketing, reporting, or data visualization tools is a plus
ADDITIONAL INFORMATION:
- Office location - 30 Hudson Street, Jersey City, NJ
- Hybrid Work Schedule - M/F remote, T/W/TH onsite
- Salary Range - $85K to $100K, DOE
- Benefits - Medical, dental, vision, paid time off, 401(K) employer matching, health & wellness reimbursement, life insurance and tuition reimbursement
