Internal IT Auditor (GRC)

Title: Technology Risk/GRC Specialist

Location: Hybrid 2 days per week on-site in any of the locations: Mt. Laurel, NJ; New York, NY; Charlotte, NC; Ft. Lauderdale, FL

Duration: 6 month contract to full time, permanent hire

Compensation: $55/hr to $65/hr.

Exact compensation may vary based on several factors, including skills, experience, and education.

Healthcare benefit packages for this role will start on the 1st day of employment and include medical, dental, and vision insurance, financial protection benefits, as well as HSA, FSA, and DCFSA account options. 401k retirement account access is offered starting on the 90th day with employer matching after one year of service. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.

Required Skills & Experience

- 5 years' Technology Risk/GRC experience

- 3 years' experience in the following areas (DevSecOps, Cloud, SDLC, ITIL)

- IT Risk Control design experience

- Knowledge of Risk Treatment Life Cycle

Nice to Have Skills & Experience

- CSSLP

- CISSP

- CRISC

Job Description

Insight Global is seeking a Technology Risk/GRC Specialist for a full-time opportunity with a large Banking client. This person will work a hybrid schedule and can sit out of the following locations 2days/week - Mt. Laurel, NJ; New York, NY; Charlotte, NC; Ft. Lauderdale, FL. This person will provide consultation and advice to partners on a broad range Technology Controls, Information Security programs, policies, standards and incidents. They will also contribute to completion of risk and control design assessments for an application portfolio, and document the impact of control gaps to the business and the overall Bank. This person will ensure technology, processes, and governance are in place to monitor, detect, prevent, and react to both current and emerging technology/security threats against the organization. Additionally, this role requires support and consulting in preparation for Audits, as well as any Regulatory compliance requirements.

This group has 3 teams; ITGC, Cloud/Infrastructure, and DevSecOps. All of these teams work collaboratively to contribute to the definition, development, and oversight of the Banks' global security management strategy and framework.