IT Controls Analyst

Job not on LinkedIn

🔥 15 hours ago

🇺🇸 United States – Remote

💵 $82.5k - $118.3k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

🧐 Analyst

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Guild Mortgage

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 1960

🏗️ Construction

💸 Finance

🏠 Real Estate

Construction • Finance • Real Estate

Guild Mortgage is a U. S. -based mortgage lender and loan servicer that provides a wide range of home financing products and services to consumers and business partners. The company offers purchase and refinance mortgages, including conventional, FHA, VA, USDA, jumbo, renovation, construction, reverse mortgages, HELOCs, and specialty programs and down-payment assistance. Guild Mortgage operates nationwide through local branches and loan officers, supports borrowers with servicing and online account management, and partners with builders, real estate agents, title agents, and correspondents.

📋 Description

• Serve as the IT General Controls contact for third-party technology relationships, including offshore staffing, SaaS/cloud providers, outsourced services, contractors, and staff augmentation • Document third-party due diligence and approval updates and maintain current third-party records • Translate due diligence and risk assessment findings into operational control requirements before go-live • Own third-party engagement classification and setup before onboarding • Review third-party roles and access for job-function alignment and least privilege • Oversee external business partner access models, approved roles, identity attributes, and monitoring requirements • Coordinate periodic access certifications and ensure timely access removal or adjustment • Monitor virtual desktop, third-party access, MFA, DLP, endpoint protection, and CASB/Zscaler controls • Track remediation for identity gaps, manual provisioning, over-provisioning, incomplete deprovisioning, and missing enhanced monitoring • Coordinate White Room setup and control validation for high-risk engagements • Manage third-party role and scope changes • Track control issues, gaps, incidents, audits, and remediation activities • Plan and facilitate third-party incident tabletop exercises • Own third-party incident escalation and reporting through resolution • Prepare periodic third-party risk reporting for Governance Committees, including metrics, evidence, and KRIs • Support third-party BCP and DR planning and annual testing • Support internal and external audits and regulatory examinations • Monitor third-party offboarding and exit controls, including system/physical access removal and contractual/data obligation closure • Support third-party oversight, governance, risk classification, location reviews, contract management, and engagement intake • Maintain the third-party control library, process flows, procedures, and control narratives • Produce specialized assessment reports and other third-party process deliverables • Advise the IT General Controls Manager and liaise with IT Governance, Vendor Management, IT Operations, Information Security, HR, Legal, Compliance, and other stakeholders • Support regulatory compliance related to third-party staffing, sourcing, and operations • Deliver training, presentations, and communications on third-party control requirements • Drive continuous improvement using visible metrics and KPIs • Monitor industry best practices and recommend control-framework enhancements • Perform other duties as assigned

🎯 Requirements

• Bachelor’s degree in Business Administration, Information Technology, or a related field, or an equivalent combination of education and experience • Minimum five years of experience in IT Operations, Security, Risk, Audit, Vendor/Third-Party Risk Management, and/or offshore/outsourced staffing program administration • Knowledge of access reviews, third-party/vendor risk management, and IT General Controls audits • Experience supporting or coordinating offshore/outsourced staffing, SaaS/cloud vendors, or IT contractor programs strongly preferred • Ability to partner with risk and governance functions and translate due diligence and risk assessment findings into operational controls • Ability to analyze and manipulate data across Excel, CRMs, GRC platforms, and online repositories • Ability to create, improve, and maintain IT processes • Understanding of systems development lifecycle and change management concepts • Understanding of financial institution governance and regulations including SSAE 16/18, FFIEC, and ISACA/COBIT • Advanced proficiency in Microsoft Word, Excel, and PowerPoint • Experience with GRC tools, vendor risk management platforms, project management tools, and IT asset-management platforms preferred • Ability to interpret and explain complex IT systems, third-party relationships, and operations to varied audiences • Strong research and problem-solving skills • Ability to establish and meet critical deadlines • Ability to prioritize multiple activities and complex projects simultaneously • Work authorization/location: Remote United States • Work primarily during Monday–Friday business week • Travel 5% or less

🏖️ Benefits

• Medical insurance • Dental insurance • Vision insurance • Life insurance • AD&D insurance • LTD insurance • 401(k) with employer match • Pleasant work environment • Competitive compensation