CrawlJobs Logo
FinXL Logo FinXL · IT - Administration

Security Control Analyst - Risk & Controls Specialist

Australia, North Sydney · Job Posted May 30, 2026
Apply Position
Job Link Share

Job Description

FinXL by Randstad Digital focuses on developing client's Networking, Digital and AI projects by providing specialised skills, managed programs, and strategic consulting across various industries. We solve complex technological and business challenges with highly talented people. We are seeking a Security Control Analyst - Risk and Controls Specialist with experience owning, documenting, maintaining and attesting security controls within a governance framework.

Requirements

  • Experience translating NIST 800-53 controls into business-friendly language and practical control requirements
  • Experience defining control requirements, control parameters and implementation guidance
  • Policy, standards, and control documentation writing experience
  • Experience running stakeholder workshops, gathering requirements and working directly with control owners
  • Control assurance, controls testing, evidence collection, and attestation experience
  • Experience in Group Risk, Operational Risk, Technology Risk, Controls Assurance or Compliance
  • Experience & understanding of how security controls operate in practice
  • ServiceNow experience, particularly CAM
FinXL - All Job Offers

Looking for more opportunities?

Search for other job offers that match your skills and interests.

Suggested Tags: Frontend Developer Secretary Talent Manager Salesforce Administrator Data Analyst
Similar Jobs for

Security Control Analyst - Risk & Controls Specialist

8 matching positions

Sap Security And Controls Specialist

We are seeking an SAP Security & Controls Consultant to support SAP risk transfo...
Location
Location
United States , Minneapolis
Salary
Salary:
Not provided
https://www.roberthalf.com Logo
Robert Half
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 2+ years of SAP experience in a business analyst, IT audit, or implementation role
  • Exposure to SAP automated controls and SAP security role architecture
  • Experience participating in IT audits or being audited (ITGCs, security, controls)
  • Experience supporting at least one SAP implementation
  • Strong written and verbal communication skills
  • Highly organized with the ability to manage multiple priorities
  • Experience auditing or testing SAP automated business controls
  • Exposure to SAP security, GRC, or access governance concepts
  • Experience with data analytics tools such as ACL or Microsoft Access
  • Background in public accounting or SOX / compliance environments
Job Responsibility
Job Responsibility
  • Support SAP security role design and segregation of duties assessments
  • Assist with the design and evaluation of SAP automated business controls
  • Participate in SAP security and controls assessments tied to implementations and operations
  • Support IT audits and remediation efforts related to SAP security, ITGCs, and controls
  • Contribute to SAP GRC and risk management initiatives
  • Prepare client deliverables and provide clear status updates
  • Collaborate with senior team members to meet project timelines and quality standards
What we offer
What we offer
  • Medical, vision, dental, and life and disability insurance
  • 401(k) plan
  • Fulltime
Read More
Arrow Right

Network Security Analyst RSA Archer Specialist

We are seeking an experienced RSA Archer Specialist / Network Security Analyst I...
Location
Location
United States , Austin
Salary
Salary:
87.00 USD / Hour
mmcgrp.com Logo
MMC Group LP
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Must possess one of the following certifications: Archer Certified Professional (ACP) Level 3 Archer Certified Administrator - Expert Certification
  • Strong hands-on RSA Archer administration and configuration experience
  • Experience with: Archer architecture, Workflow design, Data models, Access controls, Application configuration
  • Experience integrating enterprise systems using: REST APIs, Web services
  • Proficiency with: JavaScript, jQuery
  • Strong understanding of: Governance, Risk, and Compliance (GRC), Security controls, Risk management frameworks, Compliance programs
  • Ability to work independently on complex technical initiatives
  • Strong written and verbal communication skills
Job Responsibility
Job Responsibility
  • Design, configure, implement, and maintain RSA Archer solutions
  • Support: Assessment & Authorization (A&A), Controls Assurance, Issues Management, Custom Archer applications, Enterprise integrations
  • Gather and analyze business and technical requirements
  • Translate requirements into: Solution designs, User stories, Configuration specifications, Implementation plans
  • Configure Archer workflows, forms, questionnaires, approvals, calculations, and permissions
  • Develop and support REST API and web service integrations
  • Implement JavaScript and jQuery customizations within Archer applications
  • Support integrations with platforms such as: ServiceNow, ITSM systems, CMDB platforms, Risk management tools
  • Troubleshoot application issues and optimize performance
  • Maintain technical documentation and deployment records
What we offer
What we offer
  • Medical, dental, and vision coverage
  • Life and disability insurance
  • Additional voluntary benefits
  • Fulltime
Read More
Arrow Right

Information Assurance Specialist I (Information Security Analyst)

Barbaricum is seeking an Information Assurance Specialist I (Information Securit...
Location
Location
United States , Indianapolis
Salary
Salary:
Not provided
barbaricum.com Logo
Barbaricum
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Active DoD Secret Clearance
  • Bachelor's degree in related field
  • Meet DoDM 8140.03 IAT III/IAM II requirements
  • Minimum 2yr experience in network operations and information security
  • Demonstrated experience assessing security controls based on cybersecurity principles and tenets (e.g., NIST SP 800-53, Cybersecurity Framework, etc.)
  • In-depth understanding of relevance of NIST Security Controls and Control Implementation methodologies to the SA&A process
  • Demonstrated experience with continuous monitoring/ongoing authorization
Job Responsibility
Job Responsibility
  • Support cybersecurity compliance, risk management, and information assurance activities for Department of Defense (DoD) systems and networks
  • Assist in assessing and validating security controls in accordance with NIST SP 800-53, the NIST Cybersecurity Framework, and applicable DoD requirements
  • Support the Security Assessment and Authorization (SA&A) process by reviewing control implementations, identifying risks, and documenting findings
  • Participate in continuous monitoring and ongoing authorization activities to help maintain system security posture and compliance
  • Assist with vulnerability assessments, security reviews, and remediation tracking efforts across enterprise environments
  • Collaborate with system administrators, engineers, and cybersecurity personnel to implement and maintain required security controls
  • Develop and maintain cybersecurity documentation, including assessment reports, compliance artifacts, and authorization support materials
  • Monitor security-related activities and provide recommendations for risk mitigation and control improvements
  • Support compliance with the Risk Management Framework (RMF), organizational policies, and applicable federal and DoD cybersecurity standards
  • Stay informed on cybersecurity threats, vulnerabilities, and best practices to support effective information assurance operations
  • Fulltime
Read More
Arrow Right

Information Assurance Specialist – III (Information Security Analyst)

Barbaricum is seeking an experienced Information Assurance Specialist III (Infor...
Location
Location
United States , Indianapolis
Salary
Salary:
Not provided
barbaricum.com Logo
Barbaricum
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Active DoD Secret Clearance
  • Bachelor's degree in related field
  • Must meet DoDM 8140.03 IAT III/IAM II requirements
  • Minimum 10yr experience in network operations and information security
  • Demonstrated experience assessing security controls based on cybersecurity principles and tenets.(e.g., NIST SP 800-53, Cybersecurity Framework, etc.)
  • In-depth understanding of relevance of NIST Security Controls and Control Implementation methodologies to the SA&SA process
  • Relevant DOD, DHS or .gov Cyber Security Information Assurance focused experience with specific current hands-on researching, writing, and submitting complete A&A documentation packages for new system authorizations
Job Responsibility
Job Responsibility
  • Assess, implement, and validate cybersecurity controls in accordance with NIST SP 800-53, the NIST Cybersecurity Framework, and applicable DoD cybersecurity requirements
  • Support the Security Assessment and Authorization (SA&A) process by evaluating security controls, identifying risks, and recommending mitigation strategies
  • Develop, review, and maintain Assessment and Authorization (A&A) documentation packages to support system accreditation and authorization efforts
  • Conduct security assessments, vulnerability analyses, and compliance reviews to ensure systems meet federal and DoD cybersecurity standards
  • Collaborate with system owners, engineers, and cybersecurity teams to implement security controls and maintain a strong security posture across enterprise environments
  • Support continuous monitoring activities, including risk assessments, control validation, remediation tracking, and reporting
  • Provide cybersecurity guidance and recommendations related to information assurance, risk management, and regulatory compliance
  • Prepare technical reports, security documentation, and executive briefings to support authorization decisions and stakeholder requirements
  • Ensure compliance with Risk Management Framework (RMF), DoD policies, and applicable government cybersecurity regulations
  • Serve as a subject matter expert on information assurance, cybersecurity controls, accreditation processes, and security compliance initiatives
  • Fulltime
Read More
Arrow Right

Network Security Analyst II - RSA Archer Specialist

We are seeking an experienced Network Security Analyst II – RSA Archer Specialis...
Location
Location
United States , Austin
Salary
Salary:
Not provided
dutechsystems.com Logo
Dutech Systems
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Archer Certified Professional (ACP)
  • Level 3 Archer Certified Administrator – Expert Certification
  • Strong hands-on experience configuring and supporting RSA Archer platform solutions
  • Experience with REST APIs, web services, and enterprise system integrations
  • Strong knowledge of Governance, Risk, and Compliance (GRC) processes and security control frameworks
  • Proficiency with JavaScript and jQuery for Archer customizations and dynamic client-side functionality
  • Experience translating complex business requirements into technical configurations and workflows
  • Strong troubleshooting, analytical, and problem-solving skills
  • Excellent written and verbal communication skills
  • Experience working within structured, change-controlled enterprise environments
Job Responsibility
Job Responsibility
  • Design, implement, configure, and maintain RSA Archer GRC solutions across enterprise environments
  • Support and enhance Archer modules including Assessment & Authorization (A&A), Controls Assurance Program Management, Issues Management, Custom Archer Applications, Workflow Automation and Integrations
  • Gather, analyze, and document business and functional requirements and translate them into technical solution designs and implementation plans
  • Configure Archer applications including forms, workflows, questionnaires, surveys, approvals, calculations, access controls, permissions, and data relationships
  • Develop and maintain RESTful API integrations and web services between RSA Archer and enterprise systems such as ServiceNow, CMDB, ITSM, and other risk/compliance platforms
  • Implement client-side scripting and dynamic functionality using JavaScript and jQuery within Archer applications
  • Produce and maintain technical documentation including system configurations, integration specifications, testing plans, change requests, and process documentation
  • Support software development lifecycle (SDLC), change management, release management, and deployment governance processes
  • Troubleshoot application issues, resolve defects, and optimize performance within Archer environments
  • Support user adoption activities through training materials, knowledge transfer sessions, and system walkthroughs
  • Fulltime
Read More
Arrow Right

Security Specialist Advisor

The Security Specialist Advisor role is crucial for detecting and monitoring thr...
Location
Location
Mexico , Mexico
Salary
Salary:
Not provided
nttdata.com Logo
NTT DATA
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Advanced understanding of End Point Protection Software
  • Advanced understanding of Enterprise Detection and Response software
  • Advanced knowledge of technological advances within the information security arena
  • Advanced understanding of inter-relationships in an overall system or process
  • Advanced knowledge of information security management and policies
  • Advanced understanding risk management principles and frameworks
  • Advanced understanding of the organization's business operations, goals, and objectives
  • Ability to effectively communicate technical information to both technical and non-technical stakeholders
  • Ability to think critically, analyze information, and solve medium to complex problems
  • Bachelor’s degree or equivalent in Information Technology, Computer Science or related preferred
Job Responsibility
Job Responsibility
  • Manages the prevention and resolution of security breaches and ensure incident and problem management processes are initiated
  • Performs access management activities according to the policy
  • Implements and discusses security service audit schedules, review access authorization and perform the required access controls and testing to identify security weaknesses
  • Interacts with a global team of Cyber Security Analysts and specialists
  • Manages 2nd level triaging of security alerts, events, and notifications
  • Manages notifications of internal and/or external teams according to agreed alert priority levels, and escalation trees
  • Communicates status of response, resolution and final root cause analysis to the appropriate stakeholders
  • Follows and updates established and/or ad-hoc processes and work instructions and create procedures where deficiencies are identified
  • Logs, manages and coordinates service requests through to resolution including the identification, isolation, resolution and escalation of IT infrastructure faults
  • Maintains an understanding of current and emerging threats, vulnerabilities, and trends
Read More
Arrow Right

Security Specialist Advisor

The Security Specialist Advisor role at NTT DATA involves advanced expertise in ...
Location
Location
Mexico , Mexico
Salary
Salary:
Not provided
nttdata.com Logo
NTT DATA
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Bachelor’s degree or equivalent in Information Technology, Computer Science or related preferred
  • SANS GIAC Security Essentials (GSEC) or equivalent preferred
  • SANS GIAC Certified Intrusion Analyst (GCIA) or equivalent preferred
  • SANS GIAC Certified Incident Handler (GCIH) or equivalent preferred
  • Advanced experience in a Technology Information Security Industry
  • Advanced experience or knowledge of SIEM and IPS technologies
  • Advanced experience with Wireshark or tcpdump to identify normal and abnormal/malicious traffic patterns and behaviors
  • Advanced understanding of End Point Protection Software
  • Advanced understanding of Enterprise Detection and Response software
  • Advanced knowledge of technological advances within the information security arena
Job Responsibility
Job Responsibility
  • Manages the prevention and resolution of security breaches and ensure incident and problem management processes are initiated
  • Performs access management activities according to the policy
  • Implements and discusses security service audit schedules, review access authorization and perform the required access controls and testing to identify security weaknesses
  • Interacts with a global team of Cyber Security Analysts and specialists
  • Manages 2nd level triaging of security alerts, events, and notifications
  • Manages notifications of internal and/or external teams according to agreed alert priority levels, and escalation trees
  • Communicates status of response, resolution and final root cause analysis to the appropriate stakeholders
  • Follows and updates established and/or ad-hoc processes and work instructions and create procedures where deficiencies are identified
  • Logs, manages and coordinates service requests through to resolution including the identification, isolation, resolution and escalation of IT infrastructure faults
  • Maintains an understanding of current and emerging threats, vulnerabilities, and trends
Read More
Arrow Right

Senior Business Analyst (Data & Credit Risk)

FinXL IT is seeking a Senior Business Analyst to join our consulting team and be...
Location
Location
Australia , Sydney
Salary
Salary:
Not provided
finxl.com.au Logo
FinXL
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Extensive experience as a Senior Business Analyst within large-scale enterprise environments
  • Deep understanding of Customer Identity and Access Management (CIAM) or Identity security
  • Familiar with and experience in Credit Risk Management as a Credit Analyst or related position, ideally with a Telco, Bank or Financial Institution
  • Proven ability to translate regulatory requirements and risk policies into technical specs
  • Strong technical curiosity and expertise in data-led process design and reporting
  • Experience in fraud prevention, identity theft mitigation, or customer authentication
  • Exceptional stakeholder management skills with exposure to Senior Management and Risk
  • Ability to work across cross-functional teams including Engineering, Sales, and Finance
Job Responsibility
Job Responsibility
  • Map complex business requirements for the development and implementation of CIAM programs
  • Bridge the gap between broad program goals and specialist projects in identity verification
  • Translate industry regulations and internal policies into actionable project requirements
  • Develop reporting to monitor controls within end-to-end customer identity processes
  • Outline necessary controls and build monitoring to identify policy exceptions and gaps
  • Document requirements to support the unification of authentication across all channels
  • Partner with senior stakeholders to provide data-driven insights that drive process improvement
What we offer
What we offer
  • Hybrid working arrangement to get your best work done! (2-3 days in the office)
  • Lead high-profile Customer Identity & Access Management (CIAM) programs
  • Drive data-led process improvements across identity and fraud prevention
  • Influence senior leadership across Finance, Risk, and Digital divisions
Read More
Arrow Right