{"id":4250700,"url":"https://alion.io/job/moodys-controls-analyst","title":"Controls Analyst","company":{"id":58685,"name":"Moody's","domain":"moodys.com","url":"https://alion.io/company/moody-s","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":{"grade":"B","score":81,"open_postings":13,"ghost_share":0,"stale_share":0.923,"repost_share":0.077,"time_to_fill_p50_days":16,"computed_at":"2026-11-14T05:58:10Z"}},"role":"Analytics","role_family":"Analytics","seniority":"junior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Copilot","optional":false},{"name":"EU AI Act","optional":false},{"name":"LLM","optional":false},{"name":"Microsoft Office","optional":false},{"name":"NIST AI RMF","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Power Automate","optional":false},{"name":"Power BI","optional":false},{"name":"ServiceNow","optional":false}],"status":"live","first_seen_at":"2026-10-26T00:00:00Z","employer_posted_date":"2026-10-26","last_verified_at":"2026-11-14T12:48:22Z","board_verified":true,"closed_at":null,"days_open":19,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":19},"description":"Skills and Competencies\n2-4 years of experience in AI risk management, AI governance, technology risk, model risk, IT audit, information security, GRC, or a related discipline, ideally within financial services, a Big Four firm, or a global organization\nExperience assessing AI solutions, AI-enabled applications, agents, and emerging technologies, with the ability to evaluate risks, controls, and supporting evidence to develop clear, defensible conclusions\nStrong knowledge of AI risk concepts, including prompt injection, hallucinations, sensitive data exposure, bias, explainability, model drift, shadow AI, third-party dependencies, and human oversight requirements\nFamiliarity with AI governance, risk, and compliance frameworks such as NIST AI RMF, ISO/IEC 42001, EU AI Act, OWASP Top 10 for LLM Applications, and other evolving regulatory standards\nAbility to communicate complex technical and risk concepts effectively to both technical and non-technical stakeholders while collaborating across technology, cybersecurity, legal, compliance, privacy, procurement, and business teams\nWorking understanding of AI technologies, cloud environments, APIs, integrations, access controls, data flows, and automation tools, with proficiency in Microsoft Office and exposure to platforms such as Power BI, Power Automate, ServiceNow, OpenPages, OneTrust, or Microsoft Copilot\nEducation\nBachelor’s degree in Computer Science, Information Systems, Engineering, or a related discipline\nProfessional certifications such as ISO/IEC 42001 Lead Auditor/Implementer, ISO/IEC 27001 Lead Auditor/Implementer, CISA, AAIA, AISM, AAIR, CISSP, or CRISC are preferred\nResponsibilities\nExecute end-to-end control assessments, including planning, walkthroughs, evidence reviews, testing, issue validation, and reporting activities.\nConduct AI risk assessments for AI tools, AI-enabled applications, agents, connectors, plugins, and model-driven solutions to evaluate governance, security, data exposure, autonomy, and oversight controls\nAnalyze vendor assurance documentation, including SOC reports, ISO certifications, trust-center materials, security documentation, and technical architecture evidence to assess risk and compliance posture\nDevelop and review Risk and Control Self-Assessments (RCSAs), documenting risk statements, control mappings, effectiveness evaluations, evidence-based conclusions, and residual risk assessments\nSupport ISO/IEC 27001:2022 readiness reviews, internal audits, and continuous control monitoring activities by evaluating policies, procedures, technical configurations, and operational evidence\nPrepare clear and actionable assessment reports, identifying findings, risks, observations, and improvement opportunities supported by appropriate evidence and recommendations\nPartner with control owners, product teams, technology teams, and risk stakeholders to facilitate assessments, communicate outcomes, and drive remediation efforts and maintain accurate assessment documentation, workpapers, issue logs, evidence repositories, and governance reporting within approved GRC and collaboration platformsLeverage data analytics, automation, and approved AI tools to enhance assessment efficiency, reporting quality, consistency, and operational effectiveness and stay informed on emerging developments in AI, cybersecurity, regulatory requirements, and risk management practices, translating insights into practical control assessment approaches\n\nAbout the Team\nOur Internal Controls team plays a critical role in strengthening Moody’s control environment by evaluating and enhancing the effectiveness of controls that mitigate financial, cybersecurity, operational, and emerging technology risks. We partner with stakeholders across the organization to drive compliance, resilience, and continuous improvement through a disciplined and risk-focused approach.\nAs part of this team, you will have the opportunity to work on innovative AI governance and risk initiatives, collaborate with global teams, and contribute to the development of a robust control framework that supports Moody’s strategic objectives. This role offers strong exposure to emerging technologies, ongoing professional development, and the opportunity to make a meaningful impact in a rapidly evolving risk landscape.","description_format":"text","description_chars":4303,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Professional development"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Credit Bureaus & Rating Agencies","Financial Data & Market Intelligence"],"lifecycle":[{"event":"open","at":"2026-11-13T14:06:47Z"}],"visa":[],"liveness":{"score":28,"band":"fade","label":"Fading","p_open":1,"p_active":0.505,"p_room":0.55,"age_days":19,"expected_fill_days":16,"reasons":["conf:2","stale_co","velocity","win:tail","comp:junior,brand"],"computed_at":"2026-11-14T05:58:10Z"},"pay":null,"html_url":"https://alion.io/job/moodys-controls-analyst","json_url":"https://alion.io/job/moodys-controls-analyst.json","meta":{"generated_at":"2026-11-14T16:36:30Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":18854,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58685},"rest":"https://alion.io/mcp/rest/get_company?id=58685"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmoodys-controls-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmoodys-controls-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmoodys-controls-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/moodys-controls-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmoodys-controls-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4250700}},{"tool":"search_jobs","arguments":{"company":"moodys.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4250700},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}