Remote IT Audit & Risk Controls Lead

Relativity; Alton (IL); Hybrid; USD 178,000 - 266,000; Full time

Job summary

Relativity is seeking a Staff IT Auditor to lead second-line assurance across IT controls and risk management. The role focuses on continuous ITGC testing, RCM lifecycle adaptation, and expert guidance to first-line teams on control operationalization.

You will translate strategic intent into tactical execution with autonomy, maintain information security policies, and report risk metrics to senior leadership. Strong certifications and hands-on GRC experience are required.

Qualifications

• 8+ years of IT audit, risk management, or compliance experience.
• Deep knowledge of risk and control frameworks (NIST, ISO, SOC 2, COBIT).
• Advanced proficiency in ITGC testing and control design.
• Experience with FedRAMP and regulatory readiness is a plus.
• Strong communication skills for leadership reporting.

Responsibilities

• Lead second-line IT risk assurance and control testing programs.
• Design, implement, and monitor Risk and Control Matrices at scale.
• Collaborate with ERM to align IT risk appetite with the organization.
• Provide gap analyses and remediation plans for control deficiencies.
• Present testing results to executives and auditors with high fidelity.

Skills

IT risk assessment

ITGC testing

GRC frameworks

Risk management

Cross-functional communication

AI tooling usage

Mentoring analysts

Programming basics (Python/PowerShell/

Education

CISA

CISSP or similar certification

Tools

Python

PowerShell

SQL

Job description

Relativity is seeking a Staff IT Auditor to lead second-line assurance across IT controls and risk management. The role focuses on continuous ITGC testing, RCM lifecycle adaptation, and expert guidance to first-line teams on control operationalization.

You will translate strategic intent into tactical execution with autonomy, maintain information security policies, and report risk metrics to senior leadership. Strong certifications and hands-on GRC experience are required.