Senior GRC Lead: Tech Risk & Controls Modernization

Cognizant; Phoenix (AZ); On-site; USD 137,000 - 160,000; Full time

Benefits offered by this job

Medical/Dental/Vision/Life Insurance

Paid Time Off

401(k) plan

Disability Insurance

Parental Leave

Employee Stock Purchase Plan

Job summary

Cognizant is seeking an experienced GRC Lead to drive the assessment, rationalization, and modernization of technology operational controls within a large-scale financial services setting. You will lead control assessments, facilitate stakeholder workshops, validate effectiveness, and develop modernization and automation strategies.

Strong governance, analytical rigor, and hands-on banking experience are required.

Qualifications

• Proven background in technology risk, IT audit, and GRC within regulated environments.
• Experience mapping risks to controls and validating control effectiveness.
• Strong stakeholder engagement, workshop facilitation, and documentation skills.
• Familiarity with regulatory frameworks such as FFIEC, COBIT, NIST, and ITGC.
• Experience with control modernization and automation initiatives.

Responsibilities

• Lead assessment and rationalization of technology operational controls, validating design, ownership, risk alignment, and evidence requirements.
• Review control inventories to identify gaps, overlap, duplication, and optimization opportunities.
• Facilitate workshops with control owners, technology teams, risk, compliance, and governance groups.
• Develop recommendations to retain, consolidate, enhance, or retire controls based on risk and value.
• Update control definitions, ownership models, scope statements, frequencies, and evidence expectations.
• Ensure alignment with industry frameworks and regulatory expectations (FFIEC, COBIT, enterprise risk management).
• Identify opportunities for automation across control execution, evidence collection, testing, monitoring, and compliance.
• Develop assessment findings, rationalization matrices, refreshed control sets, and roadmaps for modernization.
• Support validation activities and ensure traceability to business objectives.

Skills

Technology Risk

IT Audit

GRC

Operational Risk

Controls Transformation

Education

CISA

CRISC

CIA

CGEIT

ISO 27001 Lead Auditor

Tools

ServiceNow GRC

Archer

MetricStream

OpenPages

Job description

Cognizant is seeking an experienced GRC Lead to drive the assessment, rationalization, and modernization of technology operational controls within a large-scale financial services setting. You will lead control assessments, facilitate stakeholder workshops, validate effectiveness, and develop modernization and automation strategies.

Strong governance, analytical rigor, and hands-on banking experience are required.