Cybersecurity Risk & GRC Specialist (Hybrid)

ReqRoute,Inc; Phoenix (AZ); Hybrid; USD 90,000 - 130,000; Full time

Job summary

ReqRoute,Inc is seeking a CyberSecurity Specialist - GRC to join our hybrid team in Phoenix, AZ. This role focuses on technology risk, controls testing, and regulatory compliance within financial services, ensuring robust ITGC/ITAC controls and oversight across SDLC and architecture.

You will partner with technology teams to assess risks, manage audit findings, and support internal and external reviews while driving remediation and governance practices.

Qualifications

• 5+ years of experience in Technology Risk, Information Security, IT Controls, Audit, or GRC in financial services.
• Hands-on ITGC and ITAC testing experience and information security control testing.
• Strong knowledge of risk management, controls, RCSA, audit, and regulatory compliance.
• Experience supporting SDLC and Architecture governance processes.
• Excellent analytical, documentation, and stakeholder management skills.

Responsibilities

• Conduct ITGC, ITAC, and Information Security control testing and document results.
• Perform Risk & Control Self-Assessments (RCSA) and identify technology risks and control gaps.
• Evaluate control design and operating effectiveness across SDLC, Architecture, and Technology processes.
• Manage audit findings, control deficiencies, and remediation activities through closure.
• Support internal/external audits, regulatory reviews, and compliance requests.
• Partner with SDLC and Architecture teams to provide risk guidance and governance oversight.
• Monitor risk metrics, control performance, and compliance status.

Skills

Technology Risk

Information Security

IT Controls

Audit & GRC

SDLC Governance

Stakeholder Management

Regulatory Compliance

Job description

ReqRoute,Inc is seeking a CyberSecurity Specialist - GRC to join our hybrid team in Phoenix, AZ. This role focuses on technology risk, controls testing, and regulatory compliance within financial services, ensuring robust ITGC/ITAC controls and oversight across SDLC and architecture.

You will partner with technology teams to assess risks, manage audit findings, and support internal and external reviews while driving remediation and governance practices.