About this opportunity

Omni Inclusive lists this CyberSecurity Specialist - GRC opportunity in phoenix, Arizona. Review the employer’s description below for duties, qualifications and application requirements.

Job description

Technology Risk & Controls AnalystWe are seeking a highly skilled Technology Risk & Controls Analyst with experience in SDLC, Architecture, Information Security, and Technology Risk Management within the financial services industry. The role requires hands-on experience in ITGC, ITAC, and Information Security control testing, risk assessments, audit support, and regulatory compliance activities. The successful candidate will act as a trusted risk advisor to technology teams while ensuring effective control design, testing, and remediation.

Key Responsibilities:

Conduct ITGC, ITAC, and Information Security control testing and document results.Perform Risk & Control Self-Assessments (RCSA) and identify technology risks and control gaps.Evaluate control design and operating effectiveness across SDLC, Architecture, and Technology processes.Manage audit findings, control deficiencies, and remediation activities through closure.Support internal/external audits, regulatory reviews, and compliance requests.Partner with SDLC and Architecture teams to provide risk guidance and governance oversight.Monitor risk metrics, control performance, and compliance status.Required Skills & Experience:5+ years of experience in Technology Risk, Information Security, IT Controls, Audit, or GRC within financial services.Hands-on experience with ITGC, ITAC, and Information Security control testing.Strong knowledge of risk management, controls, RCSA, audit, and regulatory compliance.Experience supporting SDLC and Architecture governance processes.Excellent analytical, documentation, and stakeholder management skills.

Preferred Qualifications:

Experience with AI-driven control testing automation or control monitoring solutions.Certifications such as CISA, CRISC, CISSP, CISM, or equivalent.Familiarity with regulatory and industry frameworks such as NIST, COBIT, ISO 27001, SOX, or FFIEC.