Remote IT GRC Lead: Policy & Risk

Apex Systems; New Orleans (LA); Remote; USD 125,000 - 156,000; Part time

Job summary

Everforth Apex is seeking a Senior GRC Analyst to lead IT governance, risk, and compliance initiatives from New Orleans. The role covers policy management, risk assessments, audits, and vendor risk management to safeguard information assets.

You will drive IT controls, reporting, and training across the organization. You will work in a remote-capable environment with strong leadership and collaboration across teams, applying frameworks like NIST CSF and ISO 27002.

Qualifications

• 6+ years in IT policy, controls, GRC, or audit.
• Senior-level with oversight and peer-review experience.
• Bachelor’s degree preferred.
• Knowledge of major security frameworks (NIST CSF, ISO 27002, CIS Controls, PCI DSS, SOX).
• Experience with GRC platforms such as ServiceNow IRM.
• Proficient in Excel and Power BI.

Responsibilities

• Lead development and maintenance of security policies and guidelines aligned to regulatory requirements.
• Perform IT risk assessments, control testing, and report findings to stakeholders.
• Oversee IT regulatory reviews and SOX ITGC testing.
• Manage policy lifecycle, vetting, committee presentation, and end-user training.
• Oversee vendor cybersecurity risk management and continuous monitoring.
• Mentor team members and drive process automation where possible.

Skills

IT governance

Risk assessments

Policy management

SOX ITGC

Regulatory compliance

Vendor risk management

Education

Bachelor's degree in Information Systems

Tools

ServiceNow IRM

Excel

Power BI

Job description

Everforth Apex is seeking a Senior GRC Analyst to lead IT governance, risk, and compliance initiatives from New Orleans. The role covers policy management, risk assessments, audits, and vendor risk management to safeguard information assets.

You will drive IT controls, reporting, and training across the organization. You will work in a remote-capable environment with strong leadership and collaboration across teams, applying frameworks like NIST CSF and ISO 27002.