Audit & Compliance Analyst IV (Lead)

Audit & Compliance Analyst IV (Lead)

Location: Lynchburg, VA or Richmond, VA (Hybrid Preferred | Remote Considered)
Pay Rate: $62.00 - $67.00 per hour

Must be able to work in the US without sponsorship requirements.


We are not accepting applications from 3rd party agencies.


Alphanumeric is hiring an Audit & Compliance Analyst IV (Lead) to work with a well-established leader in the financial and insurance industry. This role is ideal for an experienced governance, risk, and compliance (GRC) professional who enjoys improving processes, supporting audits, and driving operational excellence across enterprise information security programs.

You'll play a key role in administering policy and compliance activities, automating governance processes, supporting regulatory initiatives, and partnering with cross-functional teams to strengthen security and compliance across the organization.
What You'll Do

• Administer and support the ServiceNow Policy and Compliance modules, ensuring accurate configuration and day-to-day operations.
• Manage ServiceNow ITSM oversight queues, including intake, triage, tracking, and resolution of policy and compliance requests.
• Partner with Information Security, Risk, Compliance, Legal, Internal Audit, IT, and business teams to support enterprise governance initiatives.
• Coordinate and automate policy lifecycle activities, including policy reviews, attestations, control testing, continuous monitoring, and evidence collection.
• Improve operational efficiency through automation, standardized workflows, and streamlined compliance processes.
• Support a "test once, satisfy many" approach to meet multiple regulatory and audit requirements with minimal duplication.
• Monitor compliance controls and identify policy violations while supporting remediation efforts.
• Develop dashboards, reports, and compliance metrics for leadership and key stakeholders.
• Coordinate evidence requests and documentation for internal audits, external assessments, and regulatory reviews.
• Create and maintain standard operating procedures (SOPs), process documentation, and job aids.
• Identify opportunities to improve governance and compliance processes.
• Work independently while collaborating across distributed teams and multiple business functions.
• Manage competing priorities while maintaining exceptional attention to detail and quality.
• Execute assigned responsibilities with minimal supervision and maintain accountability for operational delivery.

Job Requirements

What We're Looking For

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field preferred.
  • Equivalent professional IT or cybersecurity experience may be considered in lieu of a degree.
• Experience with cybersecurity governance, risk, and compliance (GRC) principles.
• Minimum of 3 years of experience with ServiceNow GRC/IRM , preferably including ServiceNow ITSM.
• Working knowledge of cybersecurity frameworks such as:
  • NIST SP 800-53
  • NIST Cybersecurity Framework (CSF)
  • ISO/IEC 27001
• Experience supporting policy management, compliance monitoring, audits, and control testing.
• Familiarity with governance tools such as Unified Control Framework (UCF) and SIG.
• Understanding of Software Development Lifecycle (SDLC) and project management principles.
• Excellent written and verbal communication skills.
• Strong organizational skills with the ability to manage multiple priorities.
• Passion for continuous improvement, automation, and operational excellence.

Preferred Qualifications

Experience with one or more of the following is highly desirable:

• Security+
• CISA
• CGRC
• CISSP
• CISM
• PMP
• Experience partnering with Risk, Compliance, Legal, and Internal Audit teams.
• Knowledge of regulatory and assurance frameworks including:
  • HIPAA
  • SOX (Sarbanes-Oxley)
  • NYDFS
  • SOC 1
  • SOC 2

Why Join Us?

• Competitive hourly pay of $62-$67/hour
• Hybrid work environment with remote flexibility for qualified candidates
• Opportunity to support enterprise cybersecurity governance initiatives
• Work alongside highly collaborative security, compliance, audit, and technology teams
• Make a meaningful impact by improving security operations, compliance automation, and audit readiness within a leading financial services organization