Lead GRC Analyst – Hybrid (Warren, NJ)

Kalepa; Northern (KY); Hybrid; USD 110,000 - 160,000; Full time

Job summary

MSIG USA, the US-based subsidiary of MS&AD Insurance Group, is seeking a Lead, Governance, Risk & Compliance (GRC) to mature security governance, risk management, and compliance activities. This role focuses on hands-on execution, regulatory compliance, audits, and policy governance while offering growth into leadership responsibilities.

The ideal candidate has 5–8+ years in GRC or IT risk, familiarity with NYDFS 23 NYCRR 500 and frameworks like NIST CSF or ISO 27001, and experience in

Qualifications

• 5–8+ years of experience in GRC, IT risk management, IT audit, or information security.
• Hands-on experience with regulatory compliance, audits, or risk assessments.
• Knowledge of NYDFS 23 NYCRR 500 and at least one major framework (NIST CSF, ISO 27001, etc.)
• Experience maintaining risk registers, audit evidence, or compliance documentation.

Responsibilities

• Maintain and operate the security governance and compliance program.
• Support regulatory compliance, audits, and risk assessments.
• Coordinate audit activities and assist with remediation tracking.
• Develop and maintain security policies and standards.
• Perform vendor security risk assessments and support due diligence.
• Prepare GRC metrics and leadership reports.

Skills

GRC

IT risk management

IT audit

information security

Tools

ServiceNow GRC

Archer

OneTrust

Job description

MSIG USA, the US-based subsidiary of MS&AD Insurance Group, is seeking a Lead, Governance, Risk & Compliance (GRC) to mature security governance, risk management, and compliance activities. This role focuses on hands-on execution, regulatory compliance, audits, and policy governance while offering growth into leadership responsibilities.

The ideal candidate has 5–8+ years in GRC or IT risk, familiarity with NYDFS 23 NYCRR 500 and frameworks like NIST CSF or ISO 27001, and experience in