Controls Testing Analyst - Cyber

This is a remote role that may be hired in several markets across the United States.

The Controls Testing Associate plays an important role in evaluating the effectiveness of controls within First Citizen Bank's Enterprise Technology & Operations (ET&O) organization, primarily in the Technology and Cyber Security domains. The position will review and validate evidence supporting control effectiveness and escalate findings to management for further remediation. The right candidate will act as a mentor to less experienced team members.

• Perform Control Testing: Perform testing of controls in Cyber and Technology domains. Evaluate control design and validate the operating effectiveness of controls in mitigating, monitoring, and reporting risk throughout the ET&O organization. Identify opportunities to improve and streamline control testing and reporting.

• Support Risk and Control Self-Assessments (RCSA): Working with the Risk Consultants and Frontline Risk Management teams, leverage risk assessments and control testing results to support RCSA execution to support the identification, assessment and monitoring of organizational risks.
• Control Execution & Testing - Ensure effective development, maintenance, implementation, and ongoing enhancement of the business control environment. Execute control testing procedures in accordance with the established test plan and schedule. Conduct control tests and document test results including findings, observations and recommendations for improvement. Review and validate evidence supporting control effectiveness and adherence to established criteria. Escalate significant findings or control deficiencies to management for further investigation and remediation. Oversight of matrixed Control Testing team.
• Control Planning & Design - Supports the development, implementation and maintenance of the organizations risk management framework, policies and procedures. Coordinates risk assessments to evaluate and manage key risks across the organization. Develops test plans and methodologies for evaluating the effectiveness of control activities, executes control testing procedures in accordance with the established test plan, identifies and supports remediation of control deficiencies. Collaborate with stakeholders to understand control objectives, risks, and regulatory requirements. Design test scenarios and sampling methodologies. Review and assess control documentation and process flows to identify key control points for testing.
• Risk Testing Proficiency - Maintains a strong knowledge of risk testing developments or changes within the organization, industry, and market. Develops active relationships within professional networks to stay current on emerging issues and regulatory requirements. Communicates risk vision and regulatory requirements to applicable stakeholders, including less experienced associates in the work group.
• Reporting & Remediation -Identify control deficiencies and process gaps, highlighting areas of non-compliance and operational risk. Prepare reports summarizing control testing activities, and recommendations. Collaborate with process owners to develop remediation plans. Monitor the implementation of remediation actions.

Bachelor's Degree and 2 years of experience in Financial Services, First Line Risk Management, Enterprise Risk or Operational Risk

OR

High School Diploma or GED and 6 years of experience in Financial Services, First Line Risk Management, Enterprise Risk or Operational Risk

Preferred Area of Experience: Project Management or Internal/External Consulting

Preferred qualifications:

• 2+ years of Control Testing or auditing experience.
• CIA, CISA, CRISC, CISSP certifications preferred.
• Experience in Cybersecurity or Technology preferred.
• Knowledge of standard risk management or control frameworks such as COBIT, ISO, FFIEC, COBIT, and ITIL is required.
• Knowledge of financial sector regulatory practices for a large financial institution.
• Proficient in MS Office applications.
• Experience with Archer or a similar GRC tool.

Core Competencies

• Excellent verbal and written communication skills.
• Detail oriented and strong technical aptitude.
• Ability to work with minimal guidance.
• Ability to lead control walkthroughs and control testing results discussions with various levels of management.
• Quick learner and organized.

This job posting is expected to remain active for 45 days from the initial posting date listed above. If it is necessary to extend this deadline, the posting will remain active as appropriate. Job postings may come down early due to business need or a high volume of applicants.

If hired in North Carolina, the base pay for this position is generally between $95250 and $120000. Actual starting base pay will be determined based on skills, experience, location, and other non-discriminatory factors permitted by law. For some roles, total compensation may also include variable incentives, bonuses, benefits, and/or other awards as outlined in the offer of employment.

Benefits are an integral part of total rewards and First Citizens Bank is committed to providing a competitive, thoughtfully designed and quality benefits program to meet the needs of our associates. More information can be found at https://jobs.firstcitizens.com/benefits.

#LI-JM1