Risk & Control Analyst

Application Risk & Control Analyst

Location:

Charlotte, NC (Onsite)

Employment Type:

Contract

Contract Duration: 12 Months

This position supports Application Infrastructure Technology (AIT) for registered applications. The role focuses on maintaining compliance with internal policies and standards throughout the application lifecycle. You will be responsible for managing risk and process for day-to-day operations and any changes requiring tollgate approval, ensuring the integrity and security of application systems.

• Manage application compliance through the maintenance of App Hq, working with product managers to ensure AIT is accurately recorded.
• Oversee and close deliverables identified in the Risk Integration and Support Environment (RISE) in a timely manner.
• Report on and track patching and security requirements using GIS Continuous Monitoring tools, including impact assessment of metrics.
• Coordinate and manage documentation for the AIT to support approval processes and tollgates.
• Facilitate audit and regulatory assessments associated with the AITs.
• Support the development of policies, standards, and baselines related to AITs.
• Create Exception Requests and Risk Cases to support the risk process for AITs and own the associated risks and mitigation plans.
• Provide weekly reports and escalate AIT metrics for RISE and GIS CM.

• Understanding of application management policies, standards, processes, and systems.
• Knowledge of risk frameworks.
• Proficiency in action management and prioritization to meet deadlines.
• Developed written and verbal communication skills, along with technical, process, and reporting abilities.
• Analytical skills and experience with tools like Excel to report and track vulnerabilities.
• Experience with process definition, creation, and optimization based on AIT requirements.

• Familiarity with IT security principles, including the assessment of threats and vulnerabilities and identifying mitigation controls.
• Knowledge of current IT risks and the ability to interact with a broad cross-section of personnel to explain and enforce controls.