Job Description & Details
This is a hands-on Lead Business Analyst contract-to-hire role embedded within a major financial services firm, focusing heavily on third-party risk management and information security. You will act as the crucial bridge between business stakeholders and technical execution teams, navigating the complexities of the mortgage industry and risk frameworks.
What You'll Actually Be Doing
You will spend your days dissecting complex risk scenarios, reviewing financial statements, and translating vague business objectives into concrete technical specifications. Expect to design process and data flows, define project scope, and own the quality assurance lifecycle by drafting UAT test strategies, plans, and executing test cases. You won't just write requirements; you'll actively shepherd them through systems integration and UAT while managing third-party vendor risk and information security controls.
The Core Tech Stack
To succeed here, you need deep, battle-tested expertise in third-party risk management, information security, and operational risk, specifically within the mortgage domain. You'll also need advanced Excel skills—think complex spreadsheet formulas and automation—alongside a solid grasp of SOC reviews (like SOC 1 Type 2), IT controls, and end-to-end SDLC workflows. Knowing your way around both manual and automated testing processes is non-negotiable for ensuring your deliverables hold up under enterprise scrutiny.
Interview Expectations
Expect the hiring manager to present a hypothetical third-party vendor security breach or a messy SOC 1 audit report and ask you to walk through your risk mitigation strategy step-by-step. They are secretly testing whether you can remain calm under pressure, prioritize competing operational risks, and communicate technical compliance details clearly to non-technical executives. You should also be prepared to demonstrate your advanced Excel capabilities and how you structure UAT plans for high-stakes financial applications.
Application Advice
Skip the generic corporate resume and tailor your application to highlight your specific background in mortgage-backed operations, third-party risk, and information security frameworks. Ensure keywords like 'third-party risk management', 'SOC 1 Type 2', 'UAT test strategies', and 'financial statement analysis' appear naturally in your experience section to clear the ATS filters. Emphasize any past experience where you successfully acted as the translator between business units and engineering teams.