CyberSecurity Specialist - GRC

Job Title: CyberSecurity Specialist - Governance, Risk & Compliance (GRC)

Location: Hybrid Phoenix, AZ

Tax Term (W2, C2C): W2

Job Type (Permanent/Contract): Contract

Duration: Long Term

Description:

We are seeking a highly skilled CyberSecurity Specialist - Governance, Risk & Compliance (GRC) with 10+ years of experience in Technology Risk, Information Security, IT Controls, Audit, and Governance, Risk & Compliance (GRC). The ideal candidate will have hands-on expertise in ITGC, ITAC, Information Security Controls, Risk Assessments, SDLC Governance, Architecture Risk Management, Audit Support, and Regulatory Compliance within the financial services industry. The successful candidate will act as a trusted risk advisor to technology teams while ensuring effective control design, testing, governance, and remediation.

Role and Responsibilities:

• Conduct ITGC, ITAC, and Information Security control testing and document results.
• Perform Risk & Control Self-Assessments (RCSA) and identify technology risks and control gaps.
• Evaluate control design and operating effectiveness across SDLC, Architecture, and Technology processes.
• Manage audit findings, control deficiencies, and remediation activities through closure.
• Support internal and external audits, regulatory reviews, and compliance requests.
• Partner with SDLC and Architecture teams to provide risk guidance and governance oversight.
• Monitor risk metrics, control performance, and compliance status.
• Act as a trusted advisor to technology teams on risk management and control effectiveness.
• Support continuous improvement initiatives for technology risk and compliance programs.
• Collaborate with stakeholders to ensure compliance with enterprise security standards and regulatory requirements.

Required Skills:

• Technology Risk Management
• Governance, Risk & Compliance (GRC)
• Information Security
• Information Security Controls
• IT General Controls (ITGC)
• IT Application Controls (ITAC)
• Risk & Control Self-Assessment (RCSA)
• SDLC Governance
• Architecture Risk Governance
• Control Testing
• Control Design & Effectiveness
• Risk Assessments
• Audit Management
• Regulatory Compliance
• Internal Audit
• External Audit Support
• Risk Metrics & Reporting
• Control Remediation
• Stakeholder Management
• Information Security Governance
• Security Risk Management
• Technology Governance
• Financial Services Compliance
• Documentation & Reporting

Preferred Skills:

• AI-driven Control Testing Automation
• Continuous Control Monitoring
• NIST Cybersecurity Framework
• COBIT
• ISO 27001
• SOX Compliance
• FFIEC
• Security Governance Frameworks

Qualifications:

• 10+ years of experience in Technology Risk, Information Security, IT Controls, Audit, or GRC.
• Hands-on experience with ITGC, ITAC, and Information Security control testing.
• Strong knowledge of Technology Risk Management, RCSA, IT Controls, Audit, and Regulatory Compliance.
• Experience supporting SDLC and Architecture governance processes.
• Excellent analytical, documentation, communication, and stakeholder management skills.
• Experience working within the Financial Services industry is highly preferred.
• Experience with AI-driven control testing automation or continuous control monitoring solutions is a plus.

Preferred Certifications:

• CISA
• CRISC
• CISSP
• CISM
• Equivalent Information Security Certifications

Preferred Frameworks:

• NIST
• COBIT
• ISO 27001
• SOX
• FFIEC