Business Controls IT Testing Senior Analyst

Employee Applicant Privacy Notice

Who we are:

Shape a brighter financial future with us.

Together with our members, we’re changing the way people think about and interact with personal finance.

We’re a next-generation financial services company and national bank using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront. We’re proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world.

 

Employee Applicant Privacy Notice

Who we are: Please do not add additional company information or copy into the job description in Greenhouse. This info will automatically post there. 

Shape a brighter financial future with us. 

Together with our members, we’re changing the way people think about and interact with personal finance.

We’re a next-generation fintech company using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront. We’re proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world.

The First Line of Defense ( 1LOD) Business Control Testing (BCT) team is responsible for executing control testing activities to evaluate the effectiveness of SoFi’s Internal Controls.

The role:

The BCT IT Sr. Analyst is responsible for working closely with various SoFi business partners and/or control owners to execute control testing and deliver results within a timely manner. This person will execute tests of design and operating effectiveness, focusing on automated and application controls within SoFi’s in-scope business processes. This person will also be responsible for collaborating with the various stakeholders to understand processes, identify additional potential risks, and determine appropriate IT controls to implement.  The BCT IT Sr. Analyst will partner with the issue manager(s) to build out appropriate milestones, owners, and timelines for identified issues via the control testing lifecycle.  

Additionally, this role will partner with the BCT Manager to ensure the business units have a sustainable and effective end-to-end control environment by identifying gaps in existing processes to reduce errors and look for opportunities to create better controls with the process. 

What you’ll do: 

• Execute Design (DE) and Operating Effectiveness (OE) testing across the various SoFi business processes. 
• Conduct testing of IT controls to ensure they are operating effectively. This may involve reviewing documentation, interviewing personnel, and performing hands-on testing of system configurations.
• Create and maintain adequate testing support documentation such as workpapers, testing reports, etc. to support the results of reviews including the write-up of findings/issues for reporting. 
• Assess the adequacy of common IT Controls, including but not limited to access, change management, SoD, Incident Response, Data Security / Encryption, Network Security, Vulnerabilities / Patch Management, & IT Governance.
• Follow standardized procedures and templates.
• Develop and maintain effective relationships with internal business partners to execute work and fulfill control testing expectations.
• Drive accountability with control owners to ensure timely test completion.
• Prepare and present testing results and conduct the follow-up to monitor agreed-upon activities, including re-performance testing if needed. 
• Act as an objective source of independent advice and partner with control owners to discuss control testing results and mitigation activities.
• Advise management of any recurring test failures to ensure prompt corrective actions.
• Work independently on a range of complex tests, which may include unique IT controls. 
• Assist in the implementation of new IT controls and updating existing IT controls and the relevant documentation. 
• Supports change management of varying scope and type; tasks will typically focus on execution and sustainment activities. 
• Supports team members through training, peer review, and information sharing.