IT GRC Lead: Drive Policy, Risk & Audit Excellence

Core Specialty Insurance; Cincinnati (OH); Hybrid; USD 110,000 - 140,000; Full time

Benefits offered by this job

Medical

Dental

Vision

Life Insurance

Short/Long-term Disability

401(k) Company match

Employee Assistance Plan

Health Savings Account

Flexible Spending Account

Health Reimbursement Account

Wellness program

Job summary

Core Specialty Insurance seeks an IT GRC Lead Analyst to drive governance, risk, and compliance across the IT organization. You will partner with IT leadership, control owners, cybersecurity, and audit teams to mature the GRC program and ensure controls align with SOX, NYDFS, COBIT, NIST, and ISO 27001.

You will lead risk assessments, control reviews, evidence validation, audit support, and remediation tracking while developing governance dashboards and policy documentation for ongoing assurance.

Qualifications

• Required IT GRC leadership experience in regulated environments.
• Proven ability to manage risk assessments, controls, and evidence.
• Strong policy governance and audit support capabilities.

Responsibilities

• Lead day-to-day IT GRC activities across governance, risk, and compliance.
• Coordinate risk assessments, control reviews, and remediation tracking.
• Support audit readiness and respond to auditor requests.
• Maintain IT GRC artifacts and governance dashboards.
• Provide guidance and review for junior IT GRC analysts.

Skills

GRC leadership

Risk assessment

Audit support

Policy governance

Regulatory knowledge

Stakeholder management

Education

Bachelor's degree in Information Systems/Cybersecurity

Tools

Jira

Confluence

SharePoint

Power BI

Microsoft 365

Job description

Core Specialty Insurance seeks an IT GRC Lead Analyst to drive governance, risk, and compliance across the IT organization. You will partner with IT leadership, control owners, cybersecurity, and audit teams to mature the GRC program and ensure controls align with SOX, NYDFS, COBIT, NIST, and ISO 27001.

You will lead risk assessments, control reviews, evidence validation, audit support, and remediation tracking while developing governance dashboards and policy documentation for ongoing assurance.