Senior IT GRC & Controls Analyst

Relativity ODA LLC; United States; Hybrid; USD 110,000 - 150,000; Full time

Job summary

Relativity ODA LLC seeks a Senior Governance, Risk, and Compliance (GRC) Analyst to own assigned control areas and perform integrated IT control testing within the II A Three Lines Model. You will maintain ITGC testing, manage parts of the Risk and Control Matrix, and deliver audit-ready output on schedule.

You will communicate with engineering, product and business teams, translate technical detail into risk terms, and apply common security frameworks to decompose requirements into

Qualifications

• Experience leading IT risk assessment activities.
• Hands-on ITGC testing across systems and processes.
• Ability to design and validate controls to mitigate identified risks.
• Demonstrated audit readiness and ability to produce accurate, timely outputs.
• Strong communication with engineering, product and business teams.
• Fluent with common security frameworks and regulatory guidance.

Responsibilities

• Support and execute second line of defense activities and maintain information security policies.
• Identify risks with defensible analysis and provide remediation recommendations with owners.
• Guide control requirements and ensure alignment with control objectives.
• Monitor control performance and optimize for efficiency and compliance.
• Track deficiencies and drive closure across assigned areas.
• Maintain risk registers and contribute to leadership reporting.

Skills

IT risk assessment

ITGC testing

Control design

Audit readiness

Stakeholder communication

GRC frameworks

Job description

Relativity ODA LLC seeks a Senior Governance, Risk, and Compliance (GRC) Analyst to own assigned control areas and perform integrated IT control testing within the II A Three Lines Model. You will maintain ITGC testing, manage parts of the Risk and Control Matrix, and deliver audit-ready output on schedule.

You will communicate with engineering, product and business teams, translate technical detail into risk terms, and apply common security frameworks to decompose requirements into