GRC Specialist Senior

careers-citynational; Coral Gables (FL); On-site; USD 90,000 - 135,000; Full time

Job summary

City National Bank of Florida is seeking a Senior Governance, Risk & Compliance (GRC) Specialist to strengthen our Information Security program in Coral Gables, FL. You will partner with Technology, Risk, Audit and executive leadership to drive governance, risk assessments, and controls across the organization.

The role requires experience in cyber security compliance, regulatory frameworks, and strong communication skills to translate complex issues for diverse audiences.

Qualifications

• Experience in cyber security compliance management and risk remediation.
• Familiarity with GLBA, FFIEC, and NIST guidance and controls.
• Ability to research regulatory guidance and synthesize findings.
• Strong stakeholder communication with technical and non-technical audiences.
• Experience in financial services or banking preferred.

Responsibilities

• Drive technology and cybersecurity risk assessments and controls.
• Support regulatory examinations and audits and remediation tracking.
• Coordinate IT governance initiatives and policy alignment.
• Manage IT controls, risk metrics, and reporting processes.
• Collaborate with Technology, Risk, and Business teams on risk programs.

Skills

GRC management

Regulatory compliance

Risk assessment

Audits

Information security

Communication

Cloud security frameworks

Education

Bachelor's Degree in Business Administration, Information Systems, Accounting, Finance, or related field

CISA

CISSP

Tools

Power Automate

Copilot Studio

AI Foundry

Microsoft Office

Job description

Overview

Help Shape the Future of Cybersecurity Governance at City National Bank of Florida

Are you passionate about technology risk, cybersecurity governance, regulatory compliance, and strengthening organizational resilience?

City National Bank of Florida (CNB) is seeking a Senior Governance, Risk & Compliance (GRC) Specialist to join our growing Information Security organization in Coral Gables, Florida. This is an opportunity to make a meaningful impact in a highly regulated financial services environment while partnering directly with Information Security, Technology, Risk, Audit, and executive leadership teams.

Why Join CNB?

High-visibility role within a growing Information Security function Opportunity to influence enterprise-wide technology risk and compliance initiatives Exposure to executive leadership, regulators, auditors, and key stakeholders Collaborative, team-oriented culture focused on continuous improvement Career growth within one of Florida's leading financial institutions

What You'll Do

As a Senior GRC Specialist, you will help drive and support key Information Security governance and risk management activities, including:

• Technology and cybersecurity risk assessments
• Regulatory examination and audit support
• Issue management and remediation tracking
• Information security governance initiatives
• IT controls and compliance activities
• Risk metrics, reporting, and analysis
• Policy and standards governance
• Cross-functional partnership with Technology, Risk, and Business teams

Qualifications

• 5-7 years of of applied work experience in cyber security compliance management, cyber security programs, data engineering, analytics or integration, audits, assessments, risk and remediation.
• Knowledge of AI concepts (LLMs, prompt design, limitations, hallucinations, etc.)
• Knowledge of information security management, governance, and compliance principles, practices, laws, rules, regulations, and frameworks such as GLBA, FFIEC, and NIST.
• Knowledge of IT systems and processes, network infrastructure, data architecture, and protocols.
• Skills in using AI/ML platforms and automation frameworks, such as Microsoft AI solutions (Power Automate, Copilot Studio) and AI Foundry, for developing agents, workflow automation, and predictive analytics in cybersecurity and GRC environments (desirable).
• Skill in applying cyber and cloud security frameworks, architecture, design, operations, controls, and service orchestration.
• Proficiency in Microsoft Office products (Word, Excel, PowerPoint).
• Ability to develop and implement enterprise governance, risk, and compliance strategies and solutions.
• Ability to research and locate information related to internal and external organizations using online and other sources.
• Skill in security project management and planning.
• Ability to maintain confidentiality and handle sensitive information appropriately.
• Ability to troubleshoot and operate computers and various software packages.
• Ability to define problems, collect and analyze data, establish facts, and draw valid conclusions.
• Ability to use judgment and ingenuity in maintaining objectives and technical standards.
• Ability to communicate technical issues effectively to diverse audiences, both in writing and verbally.
• Ability to apply a risk-based approach to planning, executing, and reporting on audit engagements and auditing processes.

We're Looking For Professionals With Experience In:

• Governance, Risk & Compliance (GRC)
• Information Security Compliance
• Technology Risk Management
• IT Audit
• Cybersecurity Risk
• Internal Controls
• Regulatory Compliance
• Financial Services or Banking (preferred)

Ideal Background

You may currently be a:

• Senior GRC Analyst
• Information Security Compliance Analyst
• Technology Risk Analyst
• Cyber Risk Analyst
• IT Audit Senior
• IT Controls Specialist
• Risk & Controls Analyst
• Information Security Governance Analyst

Education

• Bachelor's Degree in Business Administration, Information Systems, Accounting, Finance, or a related field, preferred.
• Or an equivalent combination of education and/or relevant professional experience may be considered in lieu of a degree.

Certification in any of the following is preferred but not required:

• Microsoft certifications such as Power Platform Fundamentals (PL-900) or Copilot Studio Applied Skills (APL-7008)
• CISA (Certified Information Systems Auditor), CRISC (Certified in Risk and Information Systems Control), or CISSP (Certified Information Systems Security Professional).

Special Instructions to Candidates

Equal Opportunity

City National Bank of Florida is an Equal Opportunity Employer. We do not discriminate based on race, color, religion, sex, national origin, age, disability, genetic information, protected veteran status, or any status protected by federal, state, or Florida law. We comply with the ADA and applicable Florida laws.

Interview Guidelines

To ensure a fair and consistent interview process, applicants are not permitted to use AI-enabled devices during interviews, including AI glasses or similar wearable technology that can record, transmit, or generate real-time information.

Applicants who require a reasonable accommodation to participate in the interview process should contact [e-mail] in advance of the interview to submit an accommodation request. City National Bank of Florida will engage in the interactive process and provide reasonable accommodations in accordance with applicable law.