Business Analysis Associate

Job Description

The Business Analyst Associate I will be responsible for ensuring the Access Management Group has a sustainable and disciplined end-to-end control environment, identifying and escalating issues with a sense of urgency, and partnering with the process leaders to ensure issues are remediated in a timely manner.

Responsibilities include (but are not limited to) the following:

• In partnership with process leaders, evaluate and perform an end-to-end analysis of the business’ risk and control environment to identify significant gaps and weaknesses and determine the root cause of control breaks
• Create a proactive risk and control culture that leverages proven evaluation strategies and sound change management protocols
• Partner in the development of Risk & Control Self-Assessment mapping and documentation through participation in end-to-end process walkthroughs and deep dives with process leaders.
• Perform monthly Exam Ready activities to include tracking and reporting of process and control enhancements
• Work with the Business Control Manager to help manage the lifecycle of the open issues through validation and resolution.
• Organize responses/artifacts to satisfy audit inquiries and/or requests for information
• Knowledge of Role-Based Access Control and access administration best practices is a plus

Knowledge Base/Education:

• Bachelor's degree or equivalent experience
• Background in controls, audit, quality assurance, operational risk management, or compliance preferred; or equivalent subject matter expertise in a relevant business-related function/operation/technology
• Strong analytical skills with the ability to collect, organize, analyze, and disseminate significant amounts of data and information with attention to detail and accuracy
• Knowledge of the SDLC toolset and Agile methodologies with a delivery driven mindset
• Advanced working experience with MS Office Suite (especially Excel, SharePoint & Powerpoint)
• Industry recognized certifications (CISA, CISM, CRISC) are a plus