We are looking for an experienced Information Security Specialist with a strong background in IT Risk, Governance, Risk & Compliance (GRC), and IT Audit to support independent oversight and quality assurance of audit and regulatory remediation activities.
This role will also lead an exciting AI-enabled assurance transformation initiative, helping develop AI capabilities to assess remediation plans, evaluate supporting evidence, identify control gaps, and strengthen assurance processes.
Key Responsibilities:
- Conduct independent, risk-based reviews of audit and regulatory remediation plans.
- Perform sample-based testing using Inspection, Observation and Reperformance (IOR) methodologies.
- Assess remediation quality, evidence sufficiency, control effectiveness, milestones, and closure readiness.
- Provide independent challenge and oversight across remediation activities, working with stakeholders across the three lines of defense.
- Advise on IT Risk Governance, Audit & Assurance Standards, technology controls, and GRC frameworks.
- Lead the design and implementation of an AI-enabled capability to support remediation QA and challenge reviews.
- Translate QA frameworks, scoring criteria, and regulatory expectations into AI workflows and evaluation logic.
- Ensure responsible AI implementation in alignment with information security, privacy, and model risk requirements.
Must-Have Qualifications:
- 10+ years of experience in IT Risk, Governance, Risk & Compliance, or technology controls within regulated industries.
- Strong background in IT Audit, Information Security, GRC, or technology risk management.
- Excellent written and verbal communication skills, with strong documentation capabilities.
- Hands-on experience with audit testing, evidence evaluation, issue remediation validation, root cause analysis, and control effectiveness assessments.
- Experience conducting assurance, validation, or QA reviews of audit and regulatory findings.
- Understanding of IT risk and control frameworks such as NIST, COBIT, or ITIL.
- Experience with AI/ML initiatives, particularly developing or implementing AI-enabled assurance solutions.
Nice to Have:
- CISA, CRISC, CISSP, CIA, or equivalent professional certification.
- Six Sigma or Lean continuous improvement experience.
- AI Security or AI Risk Management experience.
- Experience with ServiceNow, RSA Archer, JIRA, Confluence, and SharePoint.
Note: We use AI tools to: obtain basic information, detect plagiarism, false employment history or references, categorize your skills, and do an initial match with job posting.
