IT Control Analysts

IT Control Analysts

Posted Today by Falcon Smart IT (FalconSmartIT)

Apply
Negotiable
Undetermined
Undetermined
Watford, England, United Kingdom
Apply
Certified Information Security Manager (CISM) Certified Information Systems Security Professional (CISSP) Change Management Control Framework Control Objectives For Information And Related Technology (COBIT) Data Protection Strategy Financial Controls Identity And Access Management Information Technology Controls Information Technology Infrastructure Library IT General Controls (ITGC) Management Microsoft 365 Microsoft Excel Microsoft Teams Microsoft Word Physical Security Test Planning Verification And Validation Vulnerability

Summary: The IT Control Analyst role involves validating and testing a prioritized set of IT and IS controls through direct engagement with control owners. The analyst will conduct Microsoft Teams meetings to assess control activities, document findings, and ensure compliance with established standards. This position is a 6-month fixed-term contract based in London, UK. The role requires expertise in controls testing and relevant qualifications such as CISA.

Key Responsibilities:

  • Schedule walk-through meetings with control representatives.
  • Review supporting process/activity documents/websites prior to meetings.
  • Perform testing using the enquiry method during Teams-based meetings.
  • Document control activities, processes, and operational evidence.
  • Assess and document test results in a templated Word document.
  • Update the Excel test plan tracker with results.
  • Notify management and control representatives of test outcomes.
  • Test controls across various domains including perimeter security, critical applications, resilience, data protection, and financial control frameworks.

Key Skills:

  • CISA qualification.
  • Knowledge of COBIT, ISO27001, CISM, CISSP, and ITIL (mandatory).
  • Experience in controls testing and validation.
  • Strong communication and documentation skills.
  • Proficiency in using Microsoft Teams and Excel.

Salary (Rate): undetermined

City: London

Country: United Kingdom

Working Arrangements: undetermined

IR35 Status: undetermined

Seniority Level: undetermined

Industry: IT

Detailed Description From Employer:

Job Title: IT Control Analysts

Location: London , UK

Job Type: 6 month FTC

An experienced controls testing analyst who can validation test a prioritised set of IT and IS controls through enquiry with a control owner/representative. The control testing analyst will arrange Microsoft Teams-based walk-through meetings with control representatives to undertake the test, asking probing questions to determine if the control activity is being performed satisfactorily and can be evidenced.

The control testing analyst will:

  • Schedule walk through meetings
  • Prompt for and read supporting process/activity documents/websites beforehand
  • Perform testing – enquiry method
  • Teams-based meeting
  • Ask the control representative to explain the control activities, processes, and operational evidence, along with supporting documentation / websites
  • Take notes and screenprints in evidence
  • Make the assessment – document the test result
  • Determine if the control is adequately designed, effectively operated (risk is managed)
  • Write up finding in a templated Word document, plus evidence (screenshots, URLs, …)
  • Update the Excel test plan tracker with results
  • Notify management and the control representative of the test outcome

Controls to be tested

The following control domains are to be tested

  • Perimeter - Secure Networks and Devices; Threat monitoring and response; Malware protection; Physical security.
  • IBS/Critical apps - Change management; Secure Development; User Access Management.
  • Resilience/Preparedness - Service Continuity & Recovery Planning; Crisis Response; Vulnerability Management; Physical operational resilience.
  • Data - Rest and Transit Protection, Loss Prevention, Access, Accuracy and Completeness, Retention and Disposal.
  • Financial Control Framework (FCF) - User Access Management (non-IBS apps); other ITGC areas covered by bullets above e.g., change management.

Qualifications : CISA

Knowledge : COBIT, ISO27001, CISM, CISSP; ITIL (mandatory)

Apply
Similar Jobs
Loading data...