Information Security GRC Analyst

Randstad Digital; Mount Laurel Township, Northern (NJ, KY); Hybrid; USD 110,000 - 114,000; Full time

Job summary

Randstad Digital is seeking an experienced Information Security GRC Analyst in Mount Laurel, NJ. This 12-month contract role focuses on currency governance for applications and infrastructure, ensuring compliance with security standards and minimizing end-of-life risks.

You will collaborate with BISOs, BAOs, TAOs, and security teams to assess risks, track control gaps, and report remediation progress, using Archer and ServiceNow tools to support governance efforts.

Qualifications

• 5+ years of experience in Information Security.
• Hands-on experience with Archer risk management tools.
• Experience with ServiceNow.
• Experience conducting technology risk assessments and evaluating security controls.
• Strong knowledge of IT governance, information security controls, and technology risk management frameworks.
• Experience challenging or reviewing first-line-of-defense (1B) risk and control activities, including third-party risk activities.
• Experience identifying and tracking vulnerabilities, control gaps, and remediation activities.
• Ability to work independently, manage competing priorities, and communicate effectively with technical and business stakeholders.
• Associate degree in technology or a related field.

Responsibilities

• Support currency initiatives, including remediation of outdated or end-of-support technologies.
• Review, validate, and update TARAs and CGAs.
• Partner with BISOs, BAOs, TAOs, and IS teams to complete assessments.
• Identify, track, and report security control exceptions and vulnerabilities.
• Ensure remediation aligns with project scope and security standards.
• Monitor progress toward reducing vulnerabilities and end-of-life risks.
• Maintain weekly trackers and prepare reports on activities and risks.
• Participate in meetings and collaborate with security, technology, and governance teams.
• Provide reporting to Governance, Risk & Compliance stakeholders.

Skills

Information Security

IT governance

risk management

stakeholder communication

independent work

banking knowledge

Education

Associate degree in technology

Tools

Archer

ServiceNow

Job description

Job Summary

• Location:** Mount Laurel, NJ (Hybrid - 2 days onsite, transitioning to 4 days onsite)
• Employment Type:** 12-Month Contract
• Extension Possible:** Yes
• Conversion Possible:** No
• Start Date:** November 1, 2026
• Schedule:** Monday-Friday, core business hours

Information Security GRC Analyst

• Location:** Mount Laurel, NJ (Hybrid - 2 days onsite, transitioning to 4 days onsite)
• Employment Type:** 12-Month Contract
• Extension Possible:** Yes
• Conversion Possible:** No
• Start Date:** November 1, 2026
• Schedule:** Monday-Friday, core business hours

Position Overview

We are seeking an experienced Information Security GRC Analyst to support a large financial services organization's application and infrastructure currency program.

This role focuses on ensuring applications and their supporting infrastructure are updated from outdated or end-of-support technologies while maintaining compliance with established information security standards.

The analyst will work closely with application security teams, business owners, and technology stakeholders to conduct risk assessments, identify control gaps, track exceptions, and provide visibility into technology risks and remediation progress.

The ideal candidate will have a strong background in information security, IT governance, technology risk management, and experience using Archer and ServiceNow.

Key Responsibilities

• Support application and infrastructure currency initiatives, including the remediation of outdated and end-of-support technologies.
• Review, validate, and update Technology Asset Risk Assessments (TARAs) and Control Gap Assessments (CGAs).
• Partner with Business Information Security Officers (BISOs), Business Asset Owners, Technology Asset Owners, and Information Security teams to complete required assessments.
• Identify, track, and report security control exceptions, technology vulnerabilities, and compliance gaps.
• Ensure remediation activities remain aligned with established project scope and security standards.
• Monitor progress toward reducing technology vulnerabilities and end-of-life/end-of-support risks.
• Maintain weekly trackers and prepare reports outlining completed activities, outstanding risks, and remediation progress.
• Participate in regular project meetings and collaborate with internal security, technology, and governance teams.
• Provide reporting and visibility to Governance, Risk & Compliance stakeholders.

Required Qualifications

• 5+ years of experience in Information Security.
• Hands-on experience with Archer risk management tools.
• Experience with ServiceNow.
• Experience conducting technology risk assessments and evaluating security controls.
• Strong knowledge of IT governance, information security controls, and technology risk management frameworks.
• Experience challenging or reviewing first-line-of-defense (1B) risk and control activities, including third-party risk activities.
• Experience identifying and tracking vulnerabilities, control gaps, and remediation activities.
• Ability to work independently, manage competing priorities, and communicate effectively with technical and business stakeholders.
• Associate degree in technology or a related field.

Preferred Qualifications

• CISSP, CISM, or similar information security certification or training.
• Previous experience within banking or financial services.
• Experience supporting application currency, technology lifecycle management, or infrastructure modernization initiatives.

Additional Information

• Initial training period of approximately two months.
• Approximately 50% of the role involves meetings and stakeholder collaboration.
• Internal stakeholder interaction only.
• No travel required.
• Overtime may be required as needed.

About the Opportunity

This is an opportunity to contribute to a technology risk reduction and modernization initiative within a leading financial services organization. The successful candidate will play an important role in improving application compliance, reducing security vulnerabilities, and supporting the organization's broader information security and technology governance objectives.

location: Mount Laurel Township, New Jersey

job type: Contract

salary: $80 - 83 per hour

work hours: 8am to 5pm

education: Associates

Responsibilities

Typical Day-to-Day Responsibilities:

• Attend meetings and standups to identify the scope of Currency Factory work.
• Work with application-assigned BISOs to review TARAs and CGAs.
• Update and complete assessments in collaboration with BISOs, Business Asset Owners (BAOs), and Technology Asset Owners (TAOs).
• Ensure projects remain within the defined scope of Currency Factory work.
• Report to both BISO teams and Currency Factory teams to keep stakeholders informed.
• Participate in multiple weekly meetings with currency uplift projects, the Currency Factory team, and the U.S. BISO team.
• Maintain weekly trackers and reporting to identify completed work, outstanding concerns, and progress.
• Track the success of currency uplifts in reducing asset vulnerabilities, control gaps, and end-of-life/end-of-support concerns.

TARA = Technology Asset Risk Assessment - identifies inherent risk; completed with the technology owner.

CGA = Control Gap Assessment - identifies residual risk; completed with the business owner.

BAO = Business Asset Owner

TAO = Technology Asset Owner

Time Spent in Meetings: Approximately 50%

Stakeholder Interaction: Internal

Qualifications

Required Qualifications

5+ years of experience in Information Security.

Hands-on experience with Archer risk management tools.

Experience with ServiceNow.

Experience conducting technology risk assessments and evaluating security controls.

Strong knowledge of IT governance, information security controls, and technology risk management frameworks.

Experience challenging or reviewing first-line-of-defense (1B) risk and control activities, including third-party risk activities.

Experience identifying and tracking vulnerabilities, control gaps, and remediation activities.

Ability to work independently, manage competing priorities, and communicate effectively with technical and business stakeholders.

Associate degree in technology or a related field.

Preferred Qualifications

CISSP, CISM, or similar information security certification or training.

Previous experience within banking or financial services.

Experience supporting application currency, technology lifecycle management, or infrastructure modernization initiatives.

Skills

Information Security,IT governance,ServiceNow,application security,communicate effectively,Ability to work independently,banking,Business Information,assessments,CISM,CISSP,conduct risk,internal security,governance,GRC,technology risk management,information security standards,infrastructure,financial services,project scope,Risk Assessments,Risk,risk management tools,Security,security control,security controls,information security controls,technology lifecycle,technology risks,technology risk,third-party risk,vulnerabilities,prepare reports

Equal Opportunity Employer: Race, Color, Religion, Sex, Sexual Orientation, Gender Identity, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other legally protected group status.

At Randstad Digital, we welcome people of all abilities and want to ensure that our hiring and interview process meets the needs of all applicants. If you require a reasonable accommodation to make your application or interview experience a great one, please contact [e-mail].

Pay offered to a successful candidate will be based on several factors including the candidate's education, work experience, work location, specific job duties, certifications, etc. In addition, Randstad Digital offers a comprehensive benefits package, including: medical, prescription, dental, vision, AD&D, and life insurance offerings, short-term disability, and a 401K plan (all benefits are based on eligibility).

This posting is open for thirty (30) days.