IT GRC Lead Analyst: Policy, Risk & Audit Leadership

Core Specialty Insurance Services, Inc.; Cincinnati (OH); Hybrid; USD 110,000 - 150,000; Full time

Job summary

Core Specialty Insurance Services, Inc. is seeking an IT GRC Lead Analyst to oversee governance, risk, and compliance across the IT organization. You will design, execute, and mature the IT GRC program, ensuring policies, controls, and evidence align with SOX, NYDFS, COBIT, NIST, and ISO 27001.

You will partner with leadership, audit, and risk teams to drive remediation and continuous improvement. The role integrates policy governance, framework mapping, control monitoring, and KPI reporting,

Qualifications

• 5+ years in IT GRC, IT audit, or risk management.
• Experience with SOX, NYDFS, COBIT, NIST CSF, or ISO 27001.
• Strong documentation, testing, and remediation skills.

Responsibilities

• Lead IT GRC activities across governance, risk, and compliance.
• Coordinate risk assessments, control design reviews, and evidence validation.
• Support audit readiness, issue remediation tracking, and governance reporting.
• Collaborate with IT, security, legal, and audit stakeholders.

Skills

IT GRC

Risk assessment

Policy governance

Audit readiness

Stakeholder management

Education

Bachelor's degree in Information Systems, Cybersecurity, Risk Management, or related field

CISA/CRISC preferred

Tools

Jira

Confluence

Power BI

SharePoint

Job description

Core Specialty Insurance Services, Inc. is seeking an IT GRC Lead Analyst to oversee governance, risk, and compliance across the IT organization. You will design, execute, and mature the IT GRC program, ensuring policies, controls, and evidence align with SOX, NYDFS, COBIT, NIST, and ISO 27001.

You will partner with leadership, audit, and risk teams to drive remediation and continuous improvement. The role integrates policy governance, framework mapping, control monitoring, and KPI reporting,