Business Analyst

Business Analyst – Operational Effectiveness Tester Overview The Operational Effectiveness Tester evaluates end-to-end control effectiveness across telecom, cloud, identity, and privacy domains. This role focuses on validating design vs. operating effectiveness, evidence quality, and issue severity tied to regulatory risk. Ensures controls protecting CPNI, network data, and customer privacy operate consistently—not only during audits. Key Interfaces • External: Engineering, Security, Privacy, Cloud Teams, Vendors, Regulators • Internal: GRC Lead, Risk Management, IAM, Legal/Privacy, Program Sponsors Responsibilities • Test operational effectiveness of technical and process controls using system-generated evidence • Execute end-to-end walkthroughs and re-perform key controls where required • Identify control gaps, compensating controls, root causes, and recurring failure patterns • Align findings to regulatory exposure (FCC, FTC, NYDFS, PCI, State Privacy) Domain Coverage • Telecom: CPNI, CDRs, location data, lawful intercept, SIM/IMSI/IMEI, vendor access • Identity & Access: RBAC, JML, PAM (CyberArk), break-glass access, access reviews, SoD • Cloud & Hybrid: AWS/Azure responsibility, IAM, logging, IaC evidence, vendor assurance • Privacy: Data classification, retention, consent, incident escalation, third-party sharing Qualifications • Experience in control testing, GRC, IT audit, or operational risk • Strong understanding of telecom, cloud, IAM, and privacy controls • Ability to tie control issues to real regulatory and business risk