Security Specialist V

Our client, is seeking a high-performing, authoritative Security Specialist V (IT Audit & Remediation Assurance Lead) to join their enterprise Global Security & Defense division.

In this senior governance role, you will be responsible for leading independent challenge, quality assurance, and assessment of audit and regulatory finding remediations across complex technology infrastructure and applications. Operating within the Three Lines of Defense (3

LOD) framework, you will partner closely with technology leaders, second/third-line risk teams, and external regulators to independently validate that issue remediation plans effectively mitigate information security risks. This position is ideal for a seasoned CISA-certified IT Auditor or GRC Lead who pairs 10+ years of audit validation, sample-based testing, and controls framework mastery with exceptional executive communication skills.

Duration: 8-Month Contract (with high potential for extension)

Work Arrangement:
Hybrid (Currently 2 days per week on-site at the corporate office, transitioning to 4 days per week on-site in the future)

Advantages
High-Impact Enterprise Governance Scope:
Lead independent challenge and quality assurance oversight for critical regulatory, audit, and operational risk remediations across global technology platforms.

Executive Visibility:
Provide strategic guidance, trend reporting, and independent challenge directly to senior technology leads, enterprise risk officers, and audit executives.

Modern GRC Ecosystem:
Utilize top-tier enterprise governance and tracking platforms, including RSA Archer, Service Now, Jira, and Confluence.

Continuous Innovation Focus:
Drive lean continuous improvement practices and leverage modern analytics tools (e.g., Power BI/Apps, Python) to optimize audit validation workflows.

Responsibilities
Independent Challenge & Remediation Validation
Remediation Assessment:
Lead comprehensive assessments of audit and regulatory finding remediations required to mitigate information security risks within enterprise applications and technology infrastructure.

Sample-Based Test Plans:
Design and execute rigorous, sample-based test plans relying on Industry Operational Risk (IOR) methodologies or comparable audit validation frameworks to verify control operating effectiveness.

3

LOD

Collaboration:

Partner across first, second, and third lines of defense to evaluate issue remediation quality, challenge insufficient action plans, and ensure long-term risk sustainability.

Subject Matter Guidance:
Provide expert advice to technology segments on IT Risk Governance Control Frameworks (NIST, COBIT, ITIL), Audit & Assurance Standards, and GRC processes.

Risk Reporting, Governance & Continuous Improvement
Executive Reporting & Escalations:
Identify emerging risk themes, track remediation trends, and deliver clear governance reports to senior leadership regarding issue escalations, overdue items, or validation failures.

Process Optimization:
Leverage Lean and Agile frameworks (Scrum, Kanban) to optimize operational assurance workflows, integrating modern reporting and automation utilities where appropriate.

Documentation & Audit Artifacts:
Maintain meticulous, audit-proof documentation, test evidence, and validation artifacts in enterprise GRC tools (RSA Archer, Service Now, Jira, Confluence).

Qualifications
IT Audit & Controls

Experience:

10+ years of dedicated professional experience in IT Audit, IT Governance, Quality Assurance as it relates to remediation plans, and information security control frameworks.

Remediation & Testing Expertise: 10+ years of hands-on experience assessing, evaluating, and validating audit and regulatory remediations using sample-based test plans and formal audit validation approaches (e.g., IOR methodology).

Control Framework Mastery:
In-depth knowledge of enterprise IT governance frameworks and security standards (COBIT, NIST, ITIL).

GRC & Enterprise Tooling:
Hands-on experience with GRC and work-tracking platforms, including Service Now, RSA Archer, Jira, Confluence, SharePoint, and Advanced MS Excel.

Mandatory Certification:
Active Certified Information Systems Auditor (CISA) designation is required.

Communication &

Collaboration:

Exceptional written and verbal communication skills; strong "auditor mindset" paired with a collaborative, team-oriented approach to problem-solving.

Preferred Assets & Nice-to-Haves
Active Certified Information Systems Security Professional (CISSP) or CRISC certification.

Prior IT audit or risk governance experience within a Tier-1 Bank or Regulated Financial Institution.

Exposure to Lean/Agile methodologies or AI-assisted data analytics tools (Python, Power BI).

Summary
If you are a tech-savvy Security Specialist V who pairs an absolute command of IT audit methodologies, CISA certification, and 10+ years of remediation testing with the independent challenge skills needed to safeguard enterprise technology controls, this 8-month hybrid contract is an outstanding opportunity. Bring your auditor mindset,…