Asset-Based Testing Analyst

1 week ago


Vienna, VA, United States C.C. Pace Systems Full time
Description

Job Description:

Location - Vienna - hybrid 2x a week in the office. Will be 3x starting in April '26

Basic Purpose:

The Analyst will serve in an Asset Based Testing role that will help plan, scope, execute, and report testing of IT and Information Security controls. The Analyst will be responsible for all phases of the assessment and communications with business partners and other stakeholders. They will work in an Agile environment.

Responsibilities:
  • Planning & Scoping of Asset Based Assessments to include development of communications, risk & control matrices, scope documents and other supporting information
  • Perform walk-throughs with business partners identifying actual versus expected controls
  • Create test strategies to test actual controls
  • Document all work performed to meet the IIA reperformance standard
  • Document issues and final reports
  • Present to leadership results of assessments
  • Any other duties as assigned to support the program
Qualifications:
  • Experience in control testing to include experience in some of the three lines of defense (Audit, ERM, First Line areas)
  • Experience in audit and information security risk assessments
  • Knowledge of applicable federal and state laws, rules and regulations (i.e. Federal Financial Institutions Examination Manual (FFIEC), National Information of Standards and Technology (NIST), and International Standards Organization (ISO))
  • Knowledge of NCUA, FFIEC, GLBA, NIST (including the Cyber Security Framework and 800 Series), ISO 27001/27002, SANS/CIS 20, PCI DSS, and other Information Security requirements and frameworks
  • Experience in working with all levels of staff, management, stakeholders, and third parties
  • Effective planning and organizational skills
  • Effective research, analytical and problem solving skills
  • Strong verbal, written and interpersonal communication skills, including technical writing
  • Bachelor Degree in business, information systems or related field or equivalent work/military experience
  • CISSP, CISA, CCSP, CRISC or other Information Security certifications
  • Ability to present findings and conclusions clearly and concisely
  • Ability to build effective relationships through rapport, trust, diplomacy, and tact
  • Strong word processing and spreadsheet software skills
CC Pace is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We do not discriminate on the basis of race, color, religion, sex, national origin, age, disability, genetic information, or any other protected characteristic under federal, state, or local laws.

CC Pace are committed to employing only candidates who are legally authorized to work in the United States. For us to comply with the Immigration Reform and Control Act of 1986, all new employees, as a condition of employment, must complete the Employment Eligibility Verification Form I-9 and provide documentation that establishes identity and authorization to work. E-Verify will be used for employment verification as part of your onboarding process.

CC Pace values integrity throughout our hiring process. As part of our standard verification procedures, candidates will be asked to provide documentation confirming employment history, education, and work authorization.
  • Our Services
    • Agile Services
    • Business Consulting
    • Data & Analytics
    • IT Services
    • Talent Solutions
  • Our Clients
    • Current Projects
    • Industries
    • Client List
  • Careers
    • Why Work at CC Pace
    • Job Opportunities
    • Benefits & Perks
  • Resources
    • Blog
    • Case Studies
    • Whitepapers
  • About Us
    • The CC Pace Team
    • Community Involvement
    • Careers
    • Contact Us
© 2024 Pace Systems, Inc.
  • Privacy Policy
  • Employee Gateway


  • Vienna, VA, United States Tandym Group Full time

    A top Fortune 50 financial institution is seeking an Operational Risk Testing Analyst with a focus on HR risk to support control testing and issue management within its enterprise operational risk framework. About the Opportunity: Schedule: Monday to Friday Hours: Standard business hours Setting: Hybrid (3 days onsite per week) Responsibilities: ...


  • Vienna, VA, United States Tandym Group Full time

    A top Fortune 50 financial institution is seeking an Operational Risk Testing Analyst with a focus on HR risk to support control testing and issue management within its enterprise operational risk framework. About the Opportunity: Schedule: Monday to Friday Hours: Standard business hours Setting: Hybrid (3 days onsite per week) Responsibilities: ...


  • Vienna, VA, United States Tandym Group Full time

    A top Fortune 50 financial institution is seeking an Operational Risk Testing Analyst with a focus on HR risk to support control testing and issue management within its enterprise operational risk framework. About the Opportunity: Schedule: Monday to Friday Hours: Standard business hours Setting: Hybrid (3 days onsite per week) Responsibilities: ...


  • Vienna, VA, United States C.C. Pace Systems Full time

    Description Job Description: Hybrid. 2x a week in the office, then switching to 3x a week starting in April 2026. Preferred Location: Vienna, VA. Open to Pensacola and Winchester. Our client is seeking a detail-oriented Operational Risk Testing Analyst to support control testing activities within the HR operational risk framework. The successful candidate...


  • Vienna, VA, United States NT Concepts Full time

    Working at NT Concepts means that you are part of an innovative, agile company dedicated to solving the most critical challenges in National Security. We're looking for the best and the brightest to join us in supporting this mission. If meaningful work, initiative, creativity, and continuous self-improvement are important to your career, join our growing...


  • Vienna, VA, United States NT Concepts Full time

    Working at NT Concepts means that you are part of an innovative, agile company dedicated to solving the most critical challenges in National Security. We're looking for the best and the brightest to join us in supporting this mission. If meaningful work, initiative, creativity, and continuous self-improvement are important to your career, join our growing...


  • Vienna, VA, United States Shuvel Digital Full time

    Greetings! Our client Navy Federal Credit Union is the world's largest credit union with over 10 million members, over $149 billion in assets, and over 23,000 employees. Our client is seeking an Business System Analyst-15797-Hybrid in Vienna, VA. You seem to have a rock-solid profile and your overall background seems to be a great match for the...

  • Desktop Compliance

    2 weeks ago


    Vienna, VA, United States Tandym Group Full time

    A top Fortune 50 financial institution is currently seeking a Desktop Governance & Compliance Analyst to join their team. This role plays a key part in ensuring operational efficiency, security, and compliance across a complex end-user computing environment, supporting software governance, audit readiness, and patch management processes. About the...

  • Desktop Compliance

    2 weeks ago


    Vienna, VA, United States Tandym Group Full time

    A top Fortune 50 financial institution is currently seeking a Desktop Governance & Compliance Analyst to join their team. This role plays a key part in ensuring operational efficiency, security, and compliance across a complex end-user computing environment, supporting software governance, audit readiness, and patch management processes. About the...

  • Desktop Compliance

    7 days ago


    Vienna, VA, United States Tandym Group Full time

    A top Fortune 50 financial institution is currently seeking a Desktop Governance & Compliance Analyst to join their team. This role plays a key part in ensuring operational efficiency, security, and compliance across a complex end-user computing environment, supporting software governance, audit readiness, and patch management processes. About the...