Our client, a IT Services and Consulting company, is looking for a GRC lead for their Remote location.
Responsibilities:
• Lead the subject matter execution for assessing and rationalizing approximately 80 Technology Operations controls.
• The GRC Lead drives control owner working sessions, validates control design and execution intent, documents assessment findings, develops rationalization recommendations, and supports the refreshed control set and automation roadmap.
• Assess Phase Analysis covering observations from control inventory review and control owner workshops.
• Refreshed Control Set with updated definitions, ownership, scope, frequency, risk alignment, and evidence expectations where applicable.
• Control Rationalization Matrix documenting retain, consolidate, enhance, or remove decisions with supporting rationale and validation status.
• Automation opportunity inputs covering execution, evidence collection, and testing opportunities.
• Findings and Recommendations Summary inputs covering gaps, duplication, optimization actions, and future-state recommendations.
• Assess Phase Execution
• Review control inventory and validate key attributes such as risk, scope, ownership, frequency, and evidence expectations.
• Conduct working sessions with control owners to confirm how controls operate in practice.
• Assess control completeness, relevance, risk coverage, operating clarity, and evidence adequacy.
• Identify control gaps, duplication, overlap, ambiguity, obsolete controls, and initial refresh opportunities.
• Optimize Phase Execution
• Define recommended control actions: retain, consolidate, enhance, or remove.
• Update or support updates to control definitions to improve clarity, consistency, and alignment to risk.
• Validate proposed changes with control owners and relevant stakeholders.
• Align control recommendations to applicable risk/control expectations, including FFIEC and COBIT where relevant to the control set.
• Enable Phase Support
• Identify and prioritize opportunities for automation in control execution, evidence collection, and testing.
• Document automation use cases, dependencies, implementation considerations, and expected manual-effort reduction opportunities.
• Support development of the prioritized automation roadmap and executive findings summary.
• Deliverable Ownership and Quality
• Own or co-own the core GRC content across assessment findings, rationalization matrix, refreshed control set, and roadmap inputs.
• Ensure recommendations are supported by documented observations, stakeholder inputs, and clear rationale.
• Perform quality review of control-level documentation prepared by consultants.
Requirements:
• 10+ years of experience in technology risk, IT audit, GRC, internal controls, operational risk, or control transformation.
• Hands-on experience assessing technology operational controls in banking or financial services environments.
• Experience rationalizing control inventories and documenting disposition decisions with supporting rationale.
• Strong understanding of control design, evidence expectations, audit readiness, control ownership, and risk-to-control traceability.
• Experience facilitating control owner workshops and translating discussions into structured findings and deliverables.
• Top Skills: GRC Archer
• Technology Operations Controls, GRC, IT Audit, Control Assessment, Control Rationalization, Control Inventory Optimization, Risk and Control Mapping, Evidence Review, FFIEC, COBIT, Audit Management, Operational Risk, Automation Opportunity Assessment, Financial Services Controls
• Preferred Certifications / Tools
• Preferred: CISA, CRISC, CIA, CGEIT, CISSP, ISO 27001 Lead Auditor.
• Tools: Excel, PowerPoint, Microsoft 365; familiarity with ServiceNow GRC, Archer, MetricStream, OpenPages, or similar GRC/audit tools preferred.
• Years of Experience: 20.00 Years of Experience
Why Should You Apply?
• Health Benefits
• Referral Program
• Excellent growth and advancement opportunities
Remote
Benefits:
401K, Employee Referral Program, Life Insurance
Skills:
Analysis Skills, Auditing, Automation, Banking Operations, CISA - Certified Information Systems Auditor, CISSP - Certified Information Systems Security Professional, Control Objectives for Information and related Technology (COBIT), Document Management, Documentation, Establish Priorities, Financial Control, Financial Services, Health Plan, ISO (International Organization for Standardization), Information Technology Consulting, Information Technology/Systems Audit, Inventory Management, Microsoft Excel, Microsoft PowerPoint, Microsoft Product Family, Operational Audit, Quality Control, Risk, Risk Management, ServiceNow, Support Documentation, Technical Operations, Technology Analysis, Traceability, Use Cases
undefined:
Iconma
ICONMA is a global information consulting management firm providing Professional Staffing Services and Project-Based Solutions for organizations in a broad range of industries.
• Corporate Headquarters in Troy, Michigan; 20+ locations worldwide.
• Certified Woman-Owned Business Enterprise (WBE); certified by Women’s Business Enterprise National Council, National Women Business Owners Corporation (NWBOC); and California Public Utilities Commission (CPUC).
• Founded in 2000
• 2000+ Employees
The company was founded on the principle that success is derived from delivering high quality service and resources in the most responsive, flexible, and innovative way. ICONMA invests in people and resources with a single goal: To provide our customers with the highest quality service in the most responsive manner. Through its network of offices, ICONMA provides the resources to help clients maintain their competitive advantage.
Company Size:
2,000 to 2,499 employees
Industry:
Management Consulting Services
undefined:
2000
Website:
https://www.iconma.com/