Lead GRC Analyst

Description

We are looking for a Lead Info Security Analyst to support a dynamic financial services environment. This position is ideal for an experienced security specialist who can evaluate control effectiveness, strengthen governance practices, and communicate risk clearly to both technical teams and senior leaders. The role centers on audit readiness, policy oversight, and control testing, with a strong emphasis on accuracy, documentation quality, and cross-functional collaboration.

Responsibilities:

- Evaluate information security and IT controls to confirm they are appropriately designed, implemented, and functioning as intended.

- Conduct detailed control testing, document procedures and outcomes, and follow through on remediation items to improve the overall risk posture.

- Prepare responses and supporting evidence for internal audits and regulatory reviews by coordinating with stakeholders across the organization.

- Develop clear narratives and reporting materials that explain security processes, control performance, and compliance status for technical and executive audiences.

- Partner with business and technology teams to gather, validate, and organize documentation needed for assessments, examinations, and ongoing governance activities.

- Monitor control gaps and recommend practical enhancements related to access management, change control, data integrity, and operational processes.

- Create and maintain security metrics, including key risk indicators and performance measures, to provide leadership with meaningful visibility into control effectiveness.

- Lead policy and standards review cycles by working with stakeholders to update documentation, align requirements, and support approval processes.

- Use governance and workflow tools, such as Service Now or similar platforms, to manage control inventories, testing activity, and reporting deliverables.

Requirements - Bachelor's degree in Information Security, Computer Science, Risk Management, or a closely related discipline.

- Demonstrated experience in IT audit, information security governance, control assessment, or a comparable security oversight function.

- Strong knowledge of IT general controls and application controls, including access administration, change management, data integrity, and system operations.

- Hands-on experience performing control testing against recognized frameworks such as NIST, COBIT, ISO 27001, or similar standards.

- Ability to identify control weaknesses, document findings clearly, and work with stakeholders to drive corrective action.

- Excellent written and verbal communication skills with the ability to present complex information to senior leadership and executive audiences.

- Background in audit support, regulatory response, or compliance activities within banking or financial services environments is highly valued. Technology Doesn't Change the World, People Do.®

Robert Half is the world's first and largest specialized talent solutions firm that connects highly qualified job seekers to opportunities at great companies. We offer contract, temporary and permanent placement solutions for finance and accounting, technology, marketing and creative, legal, and administrative and customer support roles.

Robert Half works to put you in the best position to succeed. We provide access to top jobs, competitive compensation and benefits, and free online training. Stay on top of every opportunity - whenever you choose - even on the go. Download the Robert Half app ()  and get 1-tap apply, notifications of AI-matched jobs, and much more.

All applicants applying for U.S. job openings must be legally authorized to work in the United States. Benefits are available to contract/temporary professionals, including medical, vision, dental, and life and disability insurance. Hired contract/temporary professionals are also eligible to enroll in our company 401(k) plan. Visit  for more information.

© 2025 Robert Half. An Equal Opportunity Employer. M/F/Disability/Veterans. By clicking "Apply Now," you're agreeing to Robert Half's Terms of Use ()  and Privacy Notice () .