Senior Business Analyst - Third-Party Risk & Information Security

Job Description: Job Description: Job Title: Senior Business Analyst - Third-Party Risk & Information Security Location: McLean, VA (5 days/week at office - Onsite) Type: Contract to Hire Must Have Skills: Strong expertise in third-party risk management, information security, and operational risk. The ideal candidate will have strong business and technical analysis skills, advanced Excel capabilities, knowledge of SOC reviews, and experience supporting end-to-end testing activities.

Job Description: Job Description: Job Title: Senior Business Analyst - Third-Party Risk & Information Security Location : McLean, VA (5 days/week at office - Onsite) Type: Contract to Hire Must Have Skills: Strong expertise in third-party risk management, information security, and operational risk. Advanced skills in spreadsheet formulas, Excel automation, and financial statement analysis. knowledge of SOC reviews (including SOC 1 Type 2), controls, and enhancements is essential. Mortgage industry experience. Experience in IT audit is a nice-to-have. Job Description: Our client is seeking an experienced Senior Business Analyst with expertise in third-party risk management, information security, and operational risk. The ideal candidate will have strong business and technical analysis skills, advanced Excel capabilities, knowledge of SOC reviews, and experience supporting end-to-end testing activities. Responsibilities Gather and analyze business requirements and translate them into technical specifications. Design and document business processes, data flows, and project objectives. Conduct feasibility analysis and support development, system integration testing, and user acceptance testing (UAT). Create and document UAT strategies, test plans, test cases, and test scripts. Support third-party risk assessments, SOC reviews, control evaluations, and process enhancements. Perform data analysis using advanced Excel formulas, automation, and financial statement analysis. Qualifications Strong expertise in third-party risk management, information security, and operational risk. Advanced Excel skills, including spreadsheet formulas and automation, along with financial statement analysis experience. Knowledge of SOC reviews, particularly SOC 1 Type 2, controls, and control enhancements. Experience in business analysis, requirements gathering, process and data flow design, and technical specification development. Ability to translate business requirements into technical requirements, define project objectives, and conduct feasibility analysis. Experience supporting development activities, systems integration testing, and user acceptance testing (UAT). Proven ability to create and document UAT test strategies, test plans, test cases, and test scripts. Knowledge of manual and automated testing methodologies. Excellent communication, analytical, documentation, and problem-solving skills. Experience in IT audit is a plus.