Sr. Risk Analyst, RCSA

The Risk and Control Self-Assessment (RCSA) Sr. Risk Analyst will assist with the day-to-day management of the second line of defense RCSA program. This role is responsible for assessing the design and operating effectiveness of internal controls, in partnership with first and second line business process owners.

What you'll be doing

• Execute Control Design Assessments, which includes conducting process walkthroughs and/or researching process documentation
• Conduct Control Performance Testing, which includes an audit of control operations utilizing risk-based sampling methodologies
• Create test steps and a detailed evidence request list
• Manage evidence requests to ensure timely turnaround
• Document testing and necessary criteria in professional workpapers, ensuring workpapers are adequately captioned
• Conduct quality reviews of RCSA testing activities
• Confirm any control design or performance deficiencies with control owners
• Assess the impact of control weaknesses and raise findings to RCSA management
• Present findings to process owners and manage timely remediation planning
• Challenge remediation plans, to ensure sustainable resolution of the root cause
• Validate finding closures and work with control owners to update risks and controls
• Prepare and present comprehensive reports regarding RCSA management
• Oversee adherence to RCSA standards, including training internal departments on requirements

You'll bring the following required skills and experiences

• 2-5 years experience in Risk, Auditing, Compliance, and/or Finance preferably in Financial Services organizations
• Experience with COSO and ISO ERM/ORM frameworks and their application to internal controls is strongly preferred
• Experience in identifying, documenting, and testing internal controls is strongly preferred
• Experience with analyzing automated controls is favorable
• Ability to quickly absorb and comprehend information presented in various formats, adapting to new information and changing processes quickly and effectively
• Skilled in analyzing information to identify patterns, relationships, and potential issues within a process
• Skilled in simultaneously managing multiple time-sensitive activities
• Skilled in strong detail-orientation and commitment to accuracy
• Experience with Google Sheets, Docs, and Slides or MS Excel is preferred
• Experience with a Governance, Risk, Compliance (GRC) tool; Archer IRM is preferred