Third-Party Risk & Controls Analyst

Job Title:

Third-Party Risk & Controls Analyst Duration:

Short‑term contract

Location:

Charlotte, NC Required Pay Scale:

$75-$79/hr •Due to client requirements this role is only open to USC or GC candidates•

Job Summary:

The Third‑Party Risk & Controls Analyst will review, test, and document internal controls across multiple business units. This role partners directly with process owners to walk through workflows, validate controls, gather evidence, and strengthen the overall control environment. The analyst ensures audit readiness, supports RCSAs, and contributes to continuous improvement of risk and compliance processes.

Project Details:

Project Description & Tech Stack:

Review internal controls, test them, document results, and partner directly with business owners to gather evidence and strengthen the control environment. Daily work includes walkthroughs with process owners, validating how controls operate, confirming documentation, and ensuring audit readiness.

Tools:

RSA Archer (preferred), ServiceNow GRC, MetricStream, Excel, internal control libraries. Project Goal /

Current Phase:

Validate control design and effectiveness, close evidence gaps, support RCSAs, and prepare business units for upcoming audits. Currently in active testing and documentation phase.

Project Type:

Controls testing, evidence review, audit readiness, compliance validation, and standardized test procedure execution. Must Haves 3-5+ years in Risk, Controls, Internal Audit, or Compliance Testing Strong understanding of Test of Design vs. Test of Effectiveness Experience with sampling, evidence review, issue/CAP tracking • Experience performing or supporting RCSAs Familiarity with regulatory frameworks:

NIST, ISO, SOC, SOX, HIPAA, PCI

Experience writing/executing Standardized Test Procedures (STPs) Strong communication and documentation skills Ability to work directly with business owners and manage multiple tasks Desired Skills Experience supporting a Unified Control Library 3-5+ years working in RSA Archer (records, controls, assessments, evidence, issues) Experience with GRC tools: RSA Archer, ServiceNow GRC, MetricStream Experience with attestation workflows or continuous monitoring Familiarity with risk scoring and control ratings Experience in BFSI or other regulated industries About Matlen Silver Experience Matters. Let your experience be driven by our experience. For more than 40 years, Matlen Silver has delivered solutions for complex talent and technology needs to Fortune 500 companies and industry leaders. Led by hard work, honesty, and a trusted team of experts, we can say that Matlen Silver technology has created a solutions experience and legacy of success that is the difference in the way the world works. Matlen Silver is an Equal Opportunity Employer and considers all applicants for all positions without regard to race, color, religion, gender, national origin, age, sexual orientation, veteran status, the presence of a non-job-related medical condition or disability, or any other legally protected status. If you are a person with a disability needing assistance with the application or at any point in the hiring process, please contact us at email and/or phone at: info@matlensilver.com // 908-393-8600 At The Matlen Silver Group, Inc., W2 employees are eligible for the following benefits: Health, vision, and dental insurance (single and family coverage) 401(k) plan (employee contributions only)