IT GRC Lead: Governance, Risk & Compliance Champion

Core Specialty; Cincinnati (OH); Hybrid; USD 110,000 - 140,000; Full time

Benefits offered by this job

Medical, dental, vision, and life ins.

401(k) with company match

Employee Assistance Plan

Health Savings Account

Job summary

Core Specialty is seeking an IT GRC Lead Analyst who reports to the AVP of IT Compliance to drive governance, risk, and compliance initiatives across the IT organization. You will lead the design, execution, and maturation of the IT GRC program, aligning controls, policies, and evidence with SOX, NYDFS, COBIT, NIST CSF, ISO 27001, and HIPAA.

You will partner with IT leadership, cybersecurity, internal and external audit, and enterprise risk teams to monitor controls, assess risks, support audit

Qualifications

• Strong understanding of IT governance, IT risk management, and IT compliance principles.
• Experience with frameworks such as SOX, NYDFS, COBIT, NIST CSF, ISO 27001, COSO, HIPAA.

Responsibilities

• Lead IT GRC activities across governance, risk, and compliance.
• Coordinate risk assessments, control reviews, evidence validation, and remediation tracking.
• Prepare and maintain risk registers, control matrices, and governance dashboards.

Job description

Core Specialty is seeking an IT GRC Lead Analyst who reports to the AVP of IT Compliance to drive governance, risk, and compliance initiatives across the IT organization. You will lead the design, execution, and maturation of the IT GRC program, aligning controls, policies, and evidence with SOX, NYDFS, COBIT, NIST CSF, ISO 27001, and HIPAA.

You will partner with IT leadership, cybersecurity, internal and external audit, and enterprise risk teams to monitor controls, assess risks, support audit