Audit & Compliance Analyst IV (Lead)

• Administer and support the ServiceNow Policy and Compliance modules, ensuring accurate configuration and day-to-day operations.
• Manage ServiceNow ITSM oversight queues, including intake, triage, tracking, and resolution of policy and compliance requests.
• Partner with Information Security, Risk, Compliance, Legal, Internal Audit, IT, and business teams to support enterprise governance initiatives.
• Coordinate and automate policy lifecycle activities, including policy reviews, attestations, control testing, continuous monitoring, and evidence collection.
• Improve operational efficiency through automation, standardized workflows, and streamlined compliance processes.
• Support a "test once, satisfy many" approach to meet multiple regulatory and audit requirements with minimal duplication.
• Monitor compliance controls and identify policy violations while supporting remediation efforts.
• Develop dashboards, reports, and compliance metrics for leadership and key stakeholders.
• Coordinate evidence requests and documentation for internal audits, external assessments, and regulatory reviews.
• Create and maintain standard operating procedures (SOPs), process documentation, and job aids.
• Identify opportunities to improve governance and compliance processes.
• Work independently while collaborating across distributed teams and multiple business functions.
• Manage competing priorities while maintaining exceptional attention to detail and quality.
• Execute assigned responsibilities with minimal supervision and maintain accountability for operational delivery.

What We're Looking For

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field preferred.
  • Equivalent professional IT or cybersecurity experience may be considered in lieu of a degree.
• Experience with cybersecurity governance, risk, and compliance (GRC) principles.
• Minimum of 3 years of experience with ServiceNow GRC/IRM, preferably including ServiceNow ITSM.
• Working knowledge of cybersecurity frameworks such as:
  • NIST SP 800-53
  • NIST Cybersecurity Framework (CSF)
  • ISO/IEC 27001
• Experience supporting policy management, compliance monitoring, audits, and control testing.
• Familiarity with governance tools such as Unified Control Framework (UCF) and SIG.
• Understanding of Software Development Lifecycle (SDLC) and project management principles.
• Excellent written and verbal communication skills.
• Strong organizational skills with the ability to manage multiple priorities.
• Passion for continuous improvement, automation, and operational excellence.

Preferred Qualifications

• Security+
• CISA
• CGRC
• CISSP
• CISM
• PMP
• Experience partnering with Risk, Compliance, Legal, and Internal Audit teams.
• Knowledge of regulatory and assurance frameworks including:
  • HIPAA
  • SOX (Sarbanes-Oxley)
  • NYDFS
  • SOC 1
  • SOC 2

Why Join Us?

• Competitive hourly pay of $62-$67/hour
• Hybrid work environment with remote flexibility for qualified candidates
• Opportunity to support enterprise cybersecurity governance initiatives
• Work alongside highly collaborative security, compliance, audit, and technology teams
• Make a meaningful impact by improving security operations, compliance automation, and audit readiness within a leading financial services organization