IT GRC Lead Analyst

Jobtailor; Westfield Center (OH); On-site; USD 120,000 - 190,000; Full time

Job summary

Jobtailor in Westfield Center, OH seeks a seasoned IT GRC leader to drive the enterprise GRC program and operating model. You will serve as the SME for governance, risk management, compliance, and control oversight, guiding risk assessments and remediation aligned with business objectives.

The role focuses on implementing ITGCs, cybersecurity controls, KRIs, and continuous improvement across governance processes while coordinating audits and vendor risk.

Qualifications

• 7+ years in IT Governance, Risk, and Compliance or related disciplines.
• Bachelor's degree in IT or related field.
• Licenses and Certifications: CISSP, CISA, CRISC, CISM, CGEIT.

Responsibilities

• Lead development, execution, and continuous improvement of enterprise IT GRC program and operating model.
• Serve as SME for IT governance, risk management compliance, and control oversight.
• Lead enterprise technology risk assessments and provide risk-based recommendations aligned with objectives and risk appetite.
• Drive maturity of risk management practices through governance enhancements and process optimization.
• Oversee regulatory compliance, standards, and internal policies with effective controls and monitoring.

Skills

CISSP

CISA

CRISC

CISM

CGEIT

Risk Assessments

Control Testing

Education

Bachelor's degree in IT, Cybersecurity, Information Systems, Risk Management, Business

Job description

Responsibilities

• Lead the development, execution, and continuous improvement of the enterprise IT Governance, Risk, and Compliance (GRC) program, frameworks, and operating model.
• Serve as the organization's subject matter expert for IT governance, risk management compliance, and control oversight.
• Lead enterprise technology risk assessments and provide risk-based recommendations aligned with business objectives and risk appetite.
• Drive the maturity of risk management practices through governance enhancements, process optimization, and industry best practices.
• Oversee compliance with regulatory requirements, industry standards, and internal policies, ensuring effective implementation of controls and monitoring mechanisms.
• Establish and maintain IT control frameworks, including ITGCs, cybersecurity controls, and key risk indicators (KRIs).
• Lead control assessments, testing, continuous monitoring, and remediation efforts to strengthen the organization's control environment.
• Serve as the primary liaison for internal and external audits, regulatory examinations, and issue remediation governance.
• Lead third‑party technology risk management activities, including vendor assessments and ongoing risk oversight.
• Champion the implementation, optimization, and automation of GRC processes and technologies to improve efficiency and effectiveness.
• Develop and deliver executive‑level reporting, dashboards, and insights on risk, compliance, audit results, and remediation activities.
• Lead cross‑functional GRC initiatives, influence strategic decision‑making, and mentor team members to foster a culture of risk awareness and continuous improvement.

Requirements

• 7+ years of experience in IT Governance, Risk, and Compliance, Information Security, IT Audit, or related disciplines.
• Bachelor's degree in Information Technology, Cybersecurity, Information Systems, Risk Management, Business, or related field.
• Licenses and Certifications: CISSP, CISA, CRISC, CISM, CGEIT.

Key Skills

• Risk Assessments
• Control Testing
• Process Optimization
• Cybersecurity Controls
• Key Risk Indicators
• Leadership
• Mentoring
• Strategic Decision‑Making