Cybersecurity GRC Specialist - Tech Risk & Audit

Saransh Inc; Phoenix (AZ); Hybrid; USD 110,000 - 160,000; Full time

Job summary

Saransh Inc. is seeking a Technology Risk & Controls Analyst to lead ITGC/ITAC testing, risk assessments, and remediation in a hybrid Phoenix environment. You will advise technology teams on control design and regulatory compliance across SDLC and architecture domains.

The role requires hands-on testing experience, strong analytical skills, and capability to manage audits and regulatory requests while maintaining effective governance oversight.

Qualifications

• 5+ years in Technology Risk, Information Security, IT Controls, Audit, or GRC in financial services.
• Hands-on ITGC, ITAC, and Information Security control testing.
• Strong knowledge of risk management, controls, RCSA, audit, and compliance.
• Experience supporting SDLC and Architecture governance.
• Excellent analytical, documentation, and stakeholder management skills.

Responsibilities

• Conduct ITGC, ITAC, and Information Security testing and document results.
• Perform Risk & Control Self-Assessments (RCSA) and identify technology risks and control gaps.
• Evaluate control design and operating effectiveness across SDLC, Architecture, and Technology processes.
• Manage audit findings, control deficiencies, and remediation activities through closure.
• Support internal/external audits, regulatory reviews, and compliance requests.
• Partner with SDLC and Architecture teams to provide risk guidance and governance oversight.
• Monitor risk metrics, control performance, and compliance status.

Skills

ITGC testing

ITAC testing

GRC

Risk assessment

Stakeholder mgmt

Documentation

AI-driven testing

Education

Certifications: CISA/CRISC/CISSP/CISM

Job description

Saransh Inc. is seeking a Technology Risk & Controls Analyst to lead ITGC/ITAC testing, risk assessments, and remediation in a hybrid Phoenix environment. You will advise technology teams on control design and regulatory compliance across SDLC and architecture domains.

The role requires hands-on testing experience, strong analytical skills, and capability to manage audits and regulatory requests while maintaining effective governance oversight.