IT Risk Analyst

Job Title: IT Risk Analyst
Location: Remote OR Hybrid Work Model Reporting to Vienna, VA, Wichester, VA, Pensacola, FL, 
Pay Rate: Open to Both C2C and W2 options
Position Type: Multiyear Contract

Responsibilities

• Support the Operational Risk Management (ORM) role for Issue Management, including risk assessments and control self-assessments (RCSA).
• Understand and articulate how ORM frameworks apply to the business, supporting issue management processes.
• Partner with RCSA and control testing teams to track issue remediation and ensure timely capture of issues.
• Research, facilitate meetings, and support business units in identifying and documenting issues impacting information security.
• Perform comprehensive gap analyses to identify root causes of process gaps and compliance failures.
• Support the development of action plans to address root causes of issues.
• Review evidence packages to confirm successful remediation, leveraging audit and security experience.
• Utilize GRC tools, especially the Logic Manager platform, to support issue and risk tracking.
• Generate metrics and reports on issue and event processes to improve transparency and compliance.
• Assist the business units in understanding issue management, industry best practices, and regulatory requirements.
• Perform other duties as assigned to support overall risk management initiatives.

• Experience in the credit union/financial services industry with a focus on regulatory frameworks, information security assessments, and remediation activities
• Knowledge of NCUA, FFIEC, GLBA, NIST (including Cyber Security Framework and 800 Series)
• Effective planning, organizational, and research skills
• Strong analytical, problem-solving, and technical writing skills
• Bachelor Degree in business, information systems, or related field, or equivalent work/military experience
• Ability to present findings clearly and concisely to all levels of management and stakeholders
• Excellent verbal, written, interpersonal, and relationship-building skills
• Experience working with GRC tools, particularly Logic Manager platform

System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.

#M-
#LI-