Security Lead (GRC Lead, SOX, GRC, DB controls)

American IT Systems • Atlanta, GA

4d • Onsite

About The Position

We are looking for an experienced GRC Lead, SOX, GRC, DB controls Security Lead with strong expertise in Security Assessments, SOX compliance, and Database driven enterprise applications, combined with knowledge of Automation and AI technologies. The role involves designing and governing secure, compliant architectures while driving automation and AI led optimization across security, compliance, and database management processes.

Requirements

• 7-10+ years of IT experience with 5+ years in Lead roles
• Strong knowledge of: Security frameworks: NIST, DFARS, SOX, Access control and identity governance, Enterprise application and database architecture
• Hands-on experience with: SQL Server & Oracle databases
• Strong understanding of: Database security, Access control models, Audit logging and compliance
• Experience with RPA and workflow automation tools
• Strong scripting skills (Python, PowerShell, Shell)
• Process automation for compliance and security workflows
• Understanding of AI/ML concepts and use cases in security/compliance
• Experience or exposure to: AI-based anomaly detection, Log analytics and SIEM integrations, Generative AI tools (Copilot, OpenAI APIs, etc.)
• Experience with cloud (Azure/AWS preferred)
• Familiarity with DevOps, CI/CD pipelines
• Knowledge of security tools and SIEM platforms

Nice To Haves

• TOGAF / Azure Architect / AWS Architect
• CISSP / CISM / Security Certifications
• Process mining tools
• AI-driven compliance solutions
• Enterprise audit and governance platforms
• Strong stakeholder and audit management skills
• Excellent analytical and problem-solving abilities
• Ability to translate regulatory requirements into technical solutions
• Leadership and mentoring capability

Responsibilities

• Perform and lead Security Assessments, including: NIST 800-171 / DFARS assessments (annual or upon security posture changes), Server Access Control Plans (ACP) – Annual, Access Control Reports (ACR) – Annual, Support SOX controls validation, audits, and remediation, Handle ad-hoc assessments from InfoSec and regulatory bodies, Develop security architecture standards and compliance frameworks, Identify risks and recommend mitigation strategies aligned with enterprise policies.
• Ensure adherence to SOX ITGC controls, Design and implement: Access management controls, Change management process controls, Audit tracking and reporting mechanisms, Collaborate with auditors and compliance teams, Automate SOX evidence collection and reporting processes, Ensure: Secure database access and role-based control, Data protection and encryption strategies, High availability and performance optimization, Standardize database security practices across platforms.
• Identify opportunities to automate: Security assessments and compliance reporting, SOX evidence collection and validation, Access control monitoring and reporting, Implement automation using tools such as: Power Automate / UiPath / Automation Anywhere, Scripting (Python, PowerShell, etc.), Design reusable automation frameworks for compliance and audit processes.
• Leverage AI/ML for: Risk detection and anomaly identification in access logs, Predictive insights on security vulnerabilities, Intelligent audit support and compliance monitoring, Explore and implement: AI-based security analytics, NLP-based compliance document analysis, AI copilots for audit and reporting processes, Collaborate with data teams to integrate AI models into enterprise systems.
• Define secure, scalable architecture frameworks, Integrate security, compliance, automation, and AI into solutions, Lead architecture reviews and governance processes, Provide technical leadership across security and compliance initiatives, Drive digital transformation through automation and AI adoption.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed