Lead GRC Analyst
Core
Lead Governance, Risk & Compliance (GRC) analyst to mature core security governance, risk management, and compliance activities.
Role type
Senior IC GRC Analyst / IT Risk Professional
Builds
Security governance programs, risk registers, audit responses, and compliance documentation
Domain
Insurance / Financial Services / Cybersecurity
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
GRC program execution, IT risk assessment, regulatory compliance tracking, audit coordination, policy management, third-party risk management, risk register maintenance, remediation tracking, written documentation
Preferred skills
Insurance/financial services experience, GRC tools (ServiceNow, Archer, OneTrust), cloud environment exposure (Azure/AWS), CISA/CRISC/CISM/CISSP certification
Technologies
ServiceNow GRC, Archer, OneTrust, NYDFS 23 NYCRR 500, NIST CSF, ISO 27001, HIPAA, GDPR
Responsibilities
Maintain and operate security governance and compliance program; Conduct IT and security risk assessments across infrastructure, applications, and cloud; Coordinate internal and external audit activities; Support development and maintenance of security policies and standards; Perform vendor and third-party security risk assessments; Prepare GRC metrics, dashboards, and summary reports for security leadership
Seniority
Senior, hands-on IC
