Senior GRC Specialist

Lead risk and control self-assessments with IT, cybersecurity, and enterprise risk management teams Evaluate control design and operating effectiveness, determine risk exposure, and recommend corrective actions Collaborate with GRC, engineering, SecOps, IT operations, and BCP teams on secure AI-driven automation solutions Identify opportunities to automate cybersecurity and GRC processes using Microsoft Copilot, Power Automate, or approved tools Develop and maintain cybersecurity and IT policies, standards, procedures, program metrics, compliance reports, and risk metrics Engage process and control owners, auditors, and consultants to assess issue severity and implement risk‑based remediation Advise internal stakeholders on information‑systems control design and risk mitigation Communicate security issues and risks to diverse audiences and ensure compliance with applicable controls Identify process gaps and recommend improvements to advance the Bank’s information security program maturity Guide program leaders on risk remediation adequacy and timeliness Perform GRC program operations, high-risk process and application evaluations, strategic planning, and automation initiatives Work independently on complex programs and assignments with diverse teams; perform other duties as assigned Requirements 5–7 years of applied experience in cybersecurity compliance management, cybersecurity programs, data engineering, analytics or integration, audits, assessments, risk, and remediation Knowledge of AI concepts, including LLMs, prompt design, limitations, and hallucinations Knowledge of information security management, governance, compliance principles, laws, regulations, and frameworks including GLBA, FFIEC, and NIST Knowledge of IT systems and processes, network infrastructure, data architecture, and protocols Skills using AI/ML platforms and automation frameworks such as Microsoft Power Automate, Copilot Studio, and AI Foundry for agents, workflow automation, and predictive analytics Skill applying cyber and cloud security frameworks, architecture, design, operations, controls, and service orchestration Proficiency with Microsoft Office products, including Word, Excel, and PowerPoint Ability to develop and implement enterprise GRC strategies and solutions Ability to research and locate information using online and other sources Skill in security project management and planning Ability to maintain confidentiality and handle sensitive information appropriately Ability to troubleshoot and operate computers and software packages Ability to define problems, collect and analyze data, establish facts, and draw valid conclusions Ability to use judgment and ingenuity while maintaining objectives and technical standards Ability to communicate technical issues effectively in writing and verbally Ability to apply a risk-based approach to audit engagement planning, execution, and reporting Bachelor’s degree in Business Administration, Information Systems, Accounting, Finance, or related field preferred; equivalent combination of education and/or relevant professional experience may be considered in lieu of a degree Microsoft certifications such as PL-900 or APL-7008, CISA,

CRISC

, or CISSP preferred but not required Demonstrates expertise in cybersecurity compliance management, risk assessment, and the development of GRC strategies. Proficient in leveraging AI-driven automation tools and frameworks to enhance information security and operational efficiency. Highest-signal resume keywords Cybersecurity Compliance Management Risk Assessment and Remediation Microsoft Power Automate Information Security Management Frameworks GRC Strategy Development ATS Optimization Keywords Hard Skills Cybersecurity Programs Data Engineering Risk Mitigation Control Design and Effectiveness AI Concepts Security Project Management Data Analysis Network Infrastructure Cloud Security Frameworks Automation Frameworks Soft Skills Effective Communication Judgment and Ingenuity Confidentiality Management Problem Solving Collaboration Certifications & Qualifications CISA CRISC

CISSP

PL-900

APL-7008

Industry Keywords GLBA

FFIEC

NIST Governance Compliance Principles Tools & Technologies Microsoft Copilot Power Automate AI Foundry Microsoft Office Suite #J-18808-Ljbffr Jobtailor