IT Audit Specialist

We are looking for an experienced Information Security Specialist with a strong background in IT Risk, Governance, Risk & Compliance (GRC), and IT Audit to support independent oversight and quality assurance of audit and regulatory remediation activities.

This role will also lead an exciting AI-enabled assurance transformation initiative, helping develop AI capabilities to assess remediation plans, evaluate supporting evidence, identify control gaps, and strengthen assurance processes.

Key Responsibilities:

• Conduct independent, risk-based reviews of audit and regulatory remediation plans.
• Perform sample-based testing using Inspection, Observation and Reperformance (IOR) methodologies.
• Assess remediation quality, evidence sufficiency, control effectiveness, milestones, and closure readiness.
• Provide independent challenge and oversight across remediation activities, working with stakeholders across the three lines of defense.
• Advise on IT Risk Governance, Audit & Assurance Standards, technology controls, and GRC frameworks.
• Lead the design and implementation of an AI-enabled capability to support remediation QA and challenge reviews.
• Translate QA frameworks, scoring criteria, and regulatory expectations into AI workflows and evaluation logic.
• Ensure responsible AI implementation in alignment with information security, privacy, and model risk requirements.

Must-Have Qualifications:

• 10+ years of experience in IT Risk, Governance, Risk & Compliance, or technology controls within regulated industries.
• Strong background in IT Audit, Information Security, GRC, or technology risk management.
• Excellent written and verbal communication skills, with strong documentation capabilities.
• Hands-on experience with audit testing, evidence evaluation, issue remediation validation, root cause analysis, and control effectiveness assessments.
• Experience conducting assurance, validation, or QA reviews of audit and regulatory findings.
• Understanding of IT risk and control frameworks such as NIST, COBIT, or ITIL.
• Experience with AI/ML initiatives, particularly developing or implementing AI-enabled assurance solutions.

Nice to Have:

• CISA, CRISC, CISSP, CIA, or equivalent professional certification.
• Six Sigma or Lean continuous improvement experience.
• AI Security or AI Risk Management experience.
• Experience with ServiceNow, RSA Archer, JIRA, Confluence, and SharePoint.

Note: We use AI tools to: obtain basic information, detect plagiarism, false employment history or references, categorize your skills, and do an initial match with job posting.