Lead DI Security and Compliance Analyst

What you'll do

• Conduct annual and ad hoc IT risk assessments to identify and prioritize risks.
• Perform second-line-of-defense control testing across various IT General Controls domains.
• Monitor first-line control self-assessments and provide feedback for improvement.
• Develop and maintain standardized tools and training programs for GRC capability.
• Design and deliver training on ITGC requirements, SOX compliance, and evidence collection.
• Act as a key liaison between CISO organization, Internal Audit, and Risk & Controls functions.
• Provide regular status reporting on audit activities, risk posture, and control effectiveness.

What we're looking for

• At least 12 years of relevant experience in IT, information security, compliance, or audit.
• Minimum 3 years of progressive experience in IT General Controls (ITGC) within a SOX-regulated environment.
• Hands-on experience with enterprise IT environments and cloud infrastructure.
• Strong understanding of risk assessment methodologies and cybersecurity principles.
• Experience working in a second line of defense function or internal audit team.
• Proficiency in IT control frameworks such as COSO, COBIT, NIST CSF, ISO 27001, and SOX.
• Industry certifications like CISA, CISM, CISSP, CIA, CPA.