It Audit Specialist

We are looking for an experienced
Information Security Specialist
with a strong background in IT Risk, Governance, Risk & Compliance (GRC), and IT Audit to support independent oversight and quality assurance of audit and regulatory remediation activities.This role will also lead an exciting
AI-enabled assurance transformation initiative, helping develop AI capabilities to assess remediation plans, evaluate supporting evidence, identify control gaps, and strengthen assurance processes.Key Responsibilities:
Conduct independent, risk-based reviews of audit and regulatory remediation plans.Perform sample-based testing using Inspection, Observation and Reperformance (IOR) methodologies.Assess remediation quality, evidence sufficiency, control effectiveness, milestones, and closure readiness.Provide independent challenge and oversight across remediation activities, working with stakeholders across the three lines of defense.Advise on IT Risk Governance, Audit & Assurance Standards, technology controls, and GRC frameworks.Lead the design and implementation of an AI-enabled capability to support remediation QA and challenge reviews.Translate QA frameworks, scoring criteria, and regulatory expectations into AI workflows and evaluation logic.Ensure responsible AI implementation in alignment with information security, privacy, and model risk requirements.Must-Have Qualifications:
10+ years of experience in IT Risk, Governance, Risk & Compliance, or technology controls within regulated industries.Strong background in IT Audit, Information Security, GRC, or technology risk management.Excellent written and verbal communication skills, with strong documentation capabilities.Hands-on experience with audit testing, evidence evaluation, issue remediation validation, root cause analysis, and control effectiveness assessments.Experience conducting assurance, validation, or QA reviews of audit and regulatory findings.Understanding of IT risk and control frameworks such as NIST, COBIT, or ITIL.Experience with AI/ML initiatives, particularly developing or implementing AI-enabled assurance solutions.Nice to Have:
CISA, CRISC, CISSP, CIA, or equivalent professional certification.Six Sigma or Lean continuous improvement experience.AI Security or AI Risk Management experience.Experience with ServiceNow, RSA Archer, JIRA, Confluence, and SharePoint.Note: We use AI tools to: obtain basic information, detect plagiarism, false employment history or references, categorize your skills, and do an initial match with job posting.
#J-18808-Ljbffr