Lead GRC Security Analyst

Description
We are seeking an experienced Lead GRC Automation Analyst to join an Information Security organization within a highly regulated financial services environment.
This is a hands-on role for someone who understands Governance, Risk, and Compliance but also knows how to build and automate processes. The ideal candidate will be comfortable identifying manual or inefficient GRC processes, designing better workflows, and personally helping implement automation that improves efficiency, accuracy, and audit readiness.
This person will also support security governance, control testing, audit activities, evidence collection, and compliance initiatives. The role offers an opportunity to help build and mature GRC capabilities while making a measurable impact through automation.
What You'll Do

• Lead the design and implementation of GRC automation initiatives.
• Identify manual, repetitive, or inefficient compliance processes and develop solutions to streamline or automate them.
• Automate evidence/artifact gathering, control testing, reporting, and other repeatable GRC processes.
• Look across the GRC function for opportunities to improve processes, eliminate manual work, and create scalable solutions.
• Support internal audits and regulatory examinations through evidence collection, documentation, and stakeholder coordination.
• Perform control validation and testing and document results.
• Identify control deficiencies, track remediation, and partner with stakeholders to resolve findings.
• Develop and maintain clear process narratives, control documentation, and supporting evidence.
• Work with GRC platforms and related technology to improve workflows and reporting.
• Develop metrics and reporting related to control effectiveness, risk, compliance, and remediation.
• Support policy and standards governance, including reviews and updates.
• Partner with technical and business stakeholders to understand requirements and implement practical solutions.
• Communicate findings, recommendations, and project progress to both technical teams and leadership.

Requirements
What We're Looking For

• 5-8+ years of experience in Information Security GRC, IT Audit, Risk, Controls, Compliance, or a related field.
• Hands-on experience designing and implementing automation.
• Demonstrated ability to take a manual GRC or compliance process and build or implement a more automated and efficient solution.
• Strong understanding of IT General Controls (ITGCs), control testing, evidence collection, and remediation.
• Experience working with a GRC platform, preferably ServiceNow IRM or LogicGate.
• Experience working in a regulated environment, with financial services or banking experience strongly preferred.
• Understanding of common security and risk frameworks such as NIST, COBIT, ISO 27001, or similar.
• Strong analytical and problem-solving skills with exceptional attention to detail.
• Excellent written and verbal communication skills.
• Ability to work effectively with both technical and non-technical stakeholders.
• Comfortable working independently, taking ownership, and driving projects from concept through implementation.

Technology Doesn't Change the World, People Do.
Robert Half is the world's first and largest specialized talent solutions firm that connects highly qualified job seekers to opportunities at great companies. We offer contract, temporary and permanent placement solutions for finance and accounting, technology, marketing and creative, legal, and administrative and customer support roles.
Robert Half works to put you in the best position to succeed. We provide access to top jobs, competitive compensation and benefits, and free online training. Stay on top of every opportunity - whenever you choose - even on the go. Download the Robert Half app and get 1-tap apply, notifications of AI-matched jobs, and much more.
All applicants applying for U.S. job openings must be legally authorized to work in the United States. Benefits are available to contract/temporary professionals, including medical, vision, dental, and life and disability insurance. Hired contract/temporary professionals are also eligible to enroll in our company 401(k) plan. Visit roberthalf.gobenefits.net for more information.
2025 Robert Half. An Equal Opportunity Employer. M/F/Disability/Veterans. By clicking "Apply Now," you're agreeing to Robert Half's Terms of Use and Privacy Notice.