Risk

• Support stakeholder engagement and technical delivery for efforts supporting a Department of Homeland Security (DHS) client with IT controls audit/assessments, remediation, and other related support.
• Managing and performing rigorous audits/assessments of IT controls using industry-standard guidance and leading practices
• Managing and performing walkthrough interviews and maintaining communication with a variety of client stakeholders, including system personnel such as system and database administrators
• Requesting, obtaining, reviewing, and analyzing a variety of artifacts to assist in executing IT controls testing such as security plans, SOPs, system screenshots, and system configuration settings.
• Evaluating the design and operating effectiveness of IT controls using provided artifacts, industry-standard guidance, leading practices, and professional judgment.
• Professionally documenting the results of IT controls test work in a consistent and high-quality manner that would allow a reviewer to repeat the test and reach the same conclusion.
• Summarizing and communicating IT controls assessment results to a variety of client stakeholders, including senior leadership personnel.
• Planning, executing, and managing day-to-day activities of IT controls assessments individually and for the team.
• Working with client personnel to understand and analyze known IT control weaknesses, identify root causes, and develop detailed, robust remediation plans.
• Providing subject matter expertise to client personnel on all matters relating to IT controls and responding to ad-hoc IT controls requests from client personnel.
• Developing documents to support internal control assessment planning decisions and control identification.
• Supporting the development of corrective action plans to resolve material weaknesses, significant deficiencies, and control deficiencies.
• Reviewing financial system modernization production environment functionality and application controls to provide input regarding audit readiness.
• Assessing incremental financial system modernization efforts as well as in-production and in-development environments with regards to audit readiness and future risks.
• Preparing presentations, briefing materials, standard operating procedures, frequently asked questions, guides, and white papers that effectively support organizational efforts to promote awareness and understanding of OMB A-123 and internal controls.

IT Risk and Controls Manager

Senior Associate, Risk Management – Governance, Valuations, Innovation

Business Director – GenAI Risk

Senior Manager, Change Enablement – Operational Readiness, Retail Risk

Senior Manager, Quantitative Analysis – Enterprise Model Risk Management