IS Governance Risk & Compliance Specialist
About The Position
The IS Governance Risk & Compliance Specialist supports the governance, development, maintenance, validation, and ongoing oversight of the Information Security Services control environment. The role partners with Control Owners, Business Process Owners, risk partners, technology and cybersecurity teams, auditors, and other stakeholders to help ensure business processes and controls are appropriately designed, accurately documented, effectively maintained, and supported by sufficient evidence. The specialist serves as a subject-matter resource throughout the control lifecycle, assisting with new controls and business processes, changes to existing controls, ownership changes, control documentation, change management, annual attestations, data-quality reviews, audit and regulatory requests, and control validation. The position exercises independent judgment when reviewing control documentation, proposed changes, supporting evidence, and alignment between documented requirements and actual execution. It also works with Control Owners and Process Owners to identify documentation or control-environment gaps and facilitate corrective action. The role also oversees implementation of security controls and technologies intended to protect organizational information assets, including data encryption, access controls, and intrusion detection and prevention systems. This position requires working from a U.S. Bank location three or more days per week.
Requirements
- Bachelor's degree or equivalent work experience.
- At least 2 years of relevant experience.
- Good understanding of Information Security Governance, Risk and Compliance.
- Experience in Governance, Risk & Compliance (GRC), cybersecurity controls, technology risk, internal controls, or a related discipline.
- Experience developing, reviewing, maintaining, and validating controls and supporting control documentation.
- Experience evaluating control design, execution, evidence, and alignment between documented requirements and operational practices.
- Experience with business-process governance and analyzing relationships among processes, risks, controls, systems, and accountable owners.
- Experience facilitating control walkthroughs, readiness reviews, quality reviews, or similar control-validation activities.
- Experience supporting internal audit, control testing, quality assurance, regulatory reviews, issue remediation, or corrective-action activities.
- Strong analytical and critical-thinking skills, including the ability to identify documentation, execution, ownership, data-quality, or control-environment gaps.
Nice To Haves
- Ability to be flexible and adapt to change.
- Excellent written and verbal communication.
Responsibilities
- Support governance, development, maintenance, validation, and ongoing oversight of the Information Security Services control environment.
- Partner with Control Owners, Business Process Owners, risk partners, technology and cybersecurity teams, auditors, and other stakeholders on control and process matters.
- Assist with developing new controls and business processes and modifying existing controls.
- Support control ownership changes, control documentation, change-management activities, annual attestations, and data-quality reviews.
- Support audit and regulatory requests and control-validation activities.
- Evaluate control documentation, proposed changes, supporting evidence, and alignment between documented requirements and operational execution.
- Work with Control Owners and Process Owners to identify documentation and control-environment gaps and facilitate corrective action.
- Oversee implementation of security controls and technologies to protect information assets, including encryption, access controls, and intrusion detection and prevention systems.
- Facilitate or support control walkthroughs, readiness reviews, quality reviews, and similar control-validation activities.
Benefits
- Healthcare coverage, including medical, dental, and vision.
- Basic term and optional term life insurance.
- Short-term and long-term disability insurance.
- Pregnancy disability and parental leave.
- 401(k) and employer-funded retirement plan.
- Paid vacation, from two to five weeks depending on salary grade and tenure.
- Up to 11 paid holiday opportunities.
- Adoption assistance.
- Sick and Safe Leave accruals of one hour for every 30 hours worked, up to 80 hours per calendar year unless otherwise provided by law.
- Incentive and recognition programs.
- Equity stock purchase.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
