Lead GRC Analyst

We are looking for a Lead Info Security Analyst to support a dynamic financial services environment. This position is ideal for an experienced security specialist who can evaluate control effectiveness, strengthen governance practices, and communicate risk clearly to both technical teams and senior leaders. The role centers on audit readiness, policy oversight, and control testing, with a strong emphasis on accuracy, documentation quality, and cross-functional collaboration.Responsibilities:• Evaluate information security and IT controls to confirm they are appropriately designed, implemented, and functioning as intended.• Conduct detailed control testing, document procedures and outcomes, and follow through on remediation items to improve the overall risk posture.• Prepare responses and supporting evidence for internal audits and regulatory reviews by coordinating with stakeholders across the organization.• Develop clear narratives and reporting materials that explain security processes, control performance, and compliance status for technical and executive audiences.• Partner with business and technology teams to gather, validate, and organize documentation needed for assessments, examinations, and ongoing governance activities.• Monitor control gaps and recommend practical enhancements related to access management, change control, data integrity, and operational processes.• Create and maintain security metrics, including key risk indicators and performance measures, to provide leadership with meaningful visibility into control effectiveness.• Lead policy and standards review cycles by working with stakeholders to update documentation, align requirements, and support approval processes.• Use governance and workflow tools, such as ServiceNow or similar platforms, to manage control inventories, testing activity, and reporting deliverables.