IT Controls & Risk Framework Analyst Job at Software Guidance & Assistance, Inc. (SGA, Inc.), New York, NY

eVAxbkk1cng3ekhQZk1IUnBTQ0pkSUhpWEE9PQ==
  • Software Guidance & Assistance, Inc. (SGA, Inc.)
  • New York, NY

Job Description

Software Guidance & Assistance, Inc., (SGA), is searching for an IT Controls & Risk Framework Analyst for a CONTRACT assignment with one of our premier Financial Services clients in lower Manhattan, NYC . He or she will need to work in the office 1-2 days/week.

Role Overview: This role is critical in strengthening our control environment by expertly mapping technology controls using Common Control Framework and providing senior-level guidance on control adoption. The ideal candidate will possess technical knowledge of various technology domains, a good understanding of risk methodologies, and some experience implementing and maturing control frameworks.

Responsibilities :

  • Control Mapping & Harmonization:
    • Support the comprehensive mapping of existing and new technology controls using the Common Control Framework (through UCF), ensuring alignment with relevant industry standards, regulations and internal policies.
    • Help identify gaps and redundancies in current control implementations and propose solutions for optimization and harmonization across various technology platforms and business units.
    • Develop and maintain detailed documentation of control mappings, including rationale, evidence requirements, and ownership.
  • IT Risk Management:
    • Provide guidance on risk mitigation strategies, control enhancements, and residual risk acceptance, as required.
    • Assist in the development and implementation of risk reporting mechanisms to provide actionable insights to management.
  • Framework Development & Maturity:
    • Contribute to the ongoing development, refinement, and maturity of the organization's technology control library..
  • Stakeholder Collaboration & Guidance:
    • Help the senior lead in facilitating workshops and training sessions to foster a strong understanding of control objectives and risk management principles.
  • Audit & Assurance Support:
    • Support internal and external audit activities by providing evidence, explanations, and documentation related to control implementations and risk posture.
    • Assist in responding to audit findings and developing corrective action plans.

Required Skills :

  • Experience:
    • Minimum of 3+ years of experience in IT risk management, IT audit, information security, or IT compliance roles.
    • Some experience in mapping technology controls to common control frameworks (CCF) or similar consolidated control libraries.
    • Exposure with various cybersecurity frameworks and regulations (e.g., NIST, CoBiT, NYDFS, OSFI)
  • Technical Acumen:
    • Some understanding of diverse technology domains, including cloud computing, network security, application security, data protection, identity and access management, and infrastructure security.
    • Familiarity with various security technologies and their control capabilities.
  • Analytical & Problem-Solving Skills:
    • Strong analytical skills with the ability to dissect complex technical and business processes to identify control points and risk exposures.
    • A strong, logical, and structured approach to problem-solving.
  • Communication & Interpersonal Skills:
    • Excellent written and verbal communication skills, with the ability to articulate complex technical and risk concepts to diverse audiences, including senior leadership.
    • Strong interpersonal skills and the ability to build rapport and influence stakeholders at all levels.
  • Independence & Proactiveness:
    • Ability to work independently with minimal supervision, manage multiple priorities, and deliver high-quality results in a fast-paced environment.
    • Proactive in identifying potential issues and proposing solutions.

Preferred Skills :

  • Relevant industry certifications such as CISSP, CISM, CISA, CRISC, AWS/Azure Security Certifications.
  • Experience within financial institutions, banking or other relevant industry under similar regulatory scrutiny.

SGA is a technology and resource solutions provider driven to stand out. We are a women-owned business. Our mission: to solve big IT problems with a more personal, boutique approach. Each year, we match consultants like you to more than 1,000 engagements. When we say let's work better together, we mean it. You'll join a diverse team built on these core values: customer service, employee development, and quality and integrity in everything we do. Be yourself, love what you do and find your passion at work. Please find us at .

SGA is an Equal Opportunity Employer and does not discriminate on the basis of Race, Color, Sex, Sexual Orientation, Gender Identity, Religion, National Origin, Disability, Veteran Status, Age, Marital Status, Pregnancy, Genetic Information, or Other Legally Protected Status. We are committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment and our services, programs, and activities. Please visit our company EEO page to request an accommodation or assistance regarding our policy.

Job Tags

Contract work, 2 days per week, 1 day per week,

Similar Jobs

Prosper Consultants Team

Business Management Consultant (Entry Level) Job at Prosper Consultants Team

 ...our culture of positivity, excitement, and are not afraid to try something new. We are one of the nation's leading Business Consulting and Management firms. Our hard-working employees make it possible to uphold our company philosophy, providing quality service to each and... 

Wood, Smith, Henning & Berman LLP

Litigation Paralegal Job at Wood, Smith, Henning & Berman LLP

Looking to join a national defense firm that is progressive and innovative? Casual day every day, flexible work from home policy, diverse and inclusive, and attorneys that are collaborative and supportive across every office? If this sounds interesting, we are that firm...

compañía Confidencial

Commercial Manager - Startup Experience Job at compañía Confidencial

 ...budgeting processes. Commercial awareness partnered with a strategic mindset. Bilingual in English and Spanish. The candidate must live in Miami. Special Competences: Excellent organizational and leadership skills. Outstanding communication and... 

North East Foods

Are you a Tractor Trailer Driver that enjoys returning home everyday?! Job at North East Foods

The ideal position for a driver who enjoys returning home every day. We are seeking a Class A CDL tractor-trailer driver. The successful candidate will have a passion for safety and customer service. We offers a competitive wage based upon experience as well as safe... 

InServ Corp.

Electrical Project Manager Job at InServ Corp.

 ...specialize in four trades (mechanical, hygienic piping, HVAC, and electrical, instrumentation and controls), working from multiple...  ...to provide a total solution. DESCRIPTION: An InServ Project Manager plans, coordinates, and completes field work for jobs performed...