Senior GRC & AI Risk: Technical Controls Lead (Remote)

Mondo; New York (NY); Remote; USD 96,000 - 110,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

401K

Job summary

Mondo is seeking a Senior GRC, Technical Controls & AI Risk to lead technical control reviews, testing, evidence evaluation and remediation planning across cybersecurity domains. You will partner with security engineering, IAM, vulnerability management, cloud, application security, data protection and business teams, supporting AI governance and risk management with NIST/ISO 27001, SOC 2 and related frameworks.

The role is remote in the U.S.

Qualifications

• 8–13 years of cybersecurity GRC, IT risk, IT audit or related experience.
• Experience performing technical control assessments and testing across multiple domains.
• Strong knowledge of control design, operating effectiveness and remediation planning.
• Experience with ServiceNow IRM, Hyperproof, or Vanta.

Responsibilities

• Conduct technical control reviews and assessments across cybersecurity domains.
• Design and execute control testing, evaluating design, operating effectiveness, scope and evidence quality.
• Review audit evidence, system reports, tickets, configurations and testing results.
• Identify control gaps, deficiencies and root causes.
• Develop risk-based remediation plans with owners, milestones and success criteria.
• Assess inherent risk, control effectiveness and residual risk.
• Support internal and external audits, regulatory assessments and assurance requests.
• Map requirements across NIST CSF, NIST SP 800-53, ISO 27001, SOC 2 and regulatory needs.
• Develop policies, standards and evidence requirements.
• Produce risk dashboards and executive recommendations.
• Improve control adoption and evidence quality using tools like ServiceNow IRM, Hyperproof, and Vanta.
• Support AI governance including AI risk matrices, vendor risk and lifecycle governance.

Skills

GRC

Cybersecurity

Risk analysis

Evidence evaluation

Audit support

Policy development

AI governance

ISO 27001

NIST frameworks

ServiceNow IRM

Tools

ServiceNow IRM

Hyperproof

Vanta

Job description

Mondo is seeking a Senior GRC, Technical Controls & AI Risk to lead technical control reviews, testing, evidence evaluation and remediation planning across cybersecurity domains. You will partner with security engineering, IAM, vulnerability management, cloud, application security, data protection and business teams, supporting AI governance and risk management with NIST/ISO 27001, SOC 2 and related frameworks.

The role is remote in the U.S.