Cyber Assurance Control Testing Analyst

5 days ago

🏈 Alabama – Remote

Although this job is listed in Alabama, this company may be open to hiring remote in other states.

⛰️ Colorado – Remote

Although this job is listed in Colorado, this company may be open to hiring remote in other states.

+5 more states

🏈 Alabama – Remote ⛰️ Colorado – Remote 🐊 Florida – Remote 🌲 North Carolina – Remote 🌴 South Carolina – Remote 🤠 Texas – Remote ⚔️ Virginia – Remote

💵 $81.1k - $129.5k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

🧐 Analyst

Apply Now

Receive Emails with Similar Jobs

SouthState Bank

WebsiteLinkedInAll Job Openings

SouthState Bank is a financial institution that offers a wide range of banking products and services. It provides personal banking solutions such as checking and savings accounts, credit cards, and online and mobile banking. The bank also offers borrowing options including personal loans, mortgages, and home equity lines of credit. Additionally, SouthState Bank provides investment services like financial and retirement planning. For businesses, it offers small business and commercial banking services, including loans, lines of credit, and cash flow management. They also provide wealth management services for personal and corporate clients.

Personal Banking • Business Banking • Mortgage • Wealth Management

1001 - 5000 employees

🏦 Banking

💸 Finance

💳 Fintech

📋 Description

• The Cyber Assurance Control Testing Analyst is responsible for executing and assessing security controls to ensure compliance with regulatory requirements, internal policies, and industry best practices. • This role will work closely with information technology, security, risk, audit, and business teams to identify gaps, recommend improvements, and enhance the Banks overall security posture. • Control Testing & Assessment • Conduct periodic security control testing to assess effectiveness and adherence to bank policies, regulatory requirements, and frameworks (e.g., NIST, ISO 27001, FFIEC, SOC 2). • Develop and execute control testing plans, documenting test procedures, results, and findings. • Perform risk-based assessments of security controls across different business functions and technology areas. • Identify control weaknesses, gaps, and areas for improvement, ensuring appropriate remediation plans are in place. • Governance & Compliance Monitoring • Support regulatory and internal audit engagements by providing evidence of control effectiveness. • Monitor compliance with security policies, standards, and procedures, escalating issues as needed. • Collaborate with first-line security teams to validate control implementations and ensure alignment with security governance requirements. • Assist in maintaining and updating security control frameworks to align with evolving risks and regulatory expectations. • Reporting & Documentation • Prepare detailed testing reports, dashboards, and risk assessments for senior management and security leadership. • Track remediation efforts, follow up on outstanding issues, and ensure timely closure of control deficiencies. • Maintain comprehensive documentation of control testing processes, findings, and recommendations. • Stakeholder Collaboration & Advisory • Work closely with IT, security, risk management, compliance, and audit teams to align control testing with business objectives. • Provide advisory support to business units on security control requirements and best practices. • Participate in security governance meetings and contribute to continuous improvement initiatives.

🎯 Requirements

• 3+ years of experience in security control testing, IT audit, security governance, or risk management (preferably in the banking or financial sector). • Strong knowledge of security frameworks and regulatory requirements, including NIST CSF, ISO 27001, FFIEC, GLBA, SOC 2, PCI DSS. • Experience with GRC tools (e.g., Archer, ServiceNow, MetricStream) for control testing and reporting. • Detail-oriented with excellent analytical, problem-solving, and communication skills. • Ability to work independently, manage multiple priorities, and interact with cross-functional teams.