Information Security GRC Analyst

job summary:

# Information Security GRC Analyst

Location: Mount Laurel, NJ (Hybrid - 2 days onsite, transitioning to 4 days onsite)

Employment Type: 12-Month Contract

Extension Possible: Yes

Conversion Possible: No

Start Date: November 1, 2026

Schedule: Monday-Friday, core business hours

### Position Overview

We are seeking an experienced Information Security GRC Analyst to support a large financial services organization's application and infrastructure currency program.

This role focuses on ensuring applications and their supporting infrastructure are updated from outdated or end-of-support technologies while maintaining compliance with established information security standards.

The analyst will work closely with application security teams, business owners, and technology stakeholders to conduct risk assessments, identify control gaps, track exceptions, and provide visibility into technology risks and remediation progress.

The ideal candidate will have a strong background in information security, IT governance, technology risk management, and experience using Archer and ServiceNow.

### Key Responsibilities

• Support application and infrastructure currency initiatives, including the remediation of outdated and end-of-support technologies.

• Review, validate, and update Technology Asset Risk Assessments (TARAs) and Control Gap Assessments (CGAs).

• Partner with Business Information Security Officers (BISOs), Business Asset Owners, Technology Asset Owners, and Information Security teams to complete required assessments.

• Identify, track, and report security control exceptions, technology vulnerabilities, and compliance gaps.

• Ensure remediation activities remain aligned with established project scope and security standards.

• Monitor progress toward reducing technology vulnerabilities and end-of-life/end-of-support risks.

• Maintain weekly trackers and prepare reports outlining completed activities, outstanding risks, and remediation progress.

• Participate in regular project meetings and collaborate with internal security, technology, and governance teams.

• Provide reporting and visibility to Governance, Risk & Compliance stakeholders.

### Required Qualifications

• 5+ years of experience in Information Security.

• Hands-on experience with Archer risk management tools.

• Experience with ServiceNow.

• Experience conducting technology risk assessments and evaluating security controls.

• Strong knowledge of IT governance, information security controls, and technology risk management frameworks.

• Experience challenging or reviewing first-line-of-defense (1B) risk and control activities, including third-party risk activities.

• Experience identifying and tracking vulnerabilities, control gaps, and remediation activities.

• Ability to work independently, manage competing priorities, and communicate effectively with technical and business stakeholders.

• Associate degree in technology or a related field.

### Preferred Qualifications

• CISSP, CISM, or similar information security certification or training.

• Previous experience within banking or financial services.

• Experience supporting application currency, technology lifecycle management, or infrastructure modernization initiatives.

### Additional Information

• Initial training period of approximately two months.

• Approximately 50% of the role involves meetings and stakeholder collaboration.

• Internal stakeholder interaction only.

• No travel required.

• Overtime may be required as needed.

### About the Opportunity

This is an opportunity to contribute to a technology risk reduction and modernization initiative within a leading financial services organization. The successful candidate will play an important role in improving application compliance, reducing security vulnerabilities, and supporting the organization's broader information security and technology governance objectives.

location: Mount Laurel Township, New Jersey

job type: Contract

salary: $80 - 83 per hour

work hours: 8am to 5pm

education: Associates

responsibilities:

Typical Day-to-Day Responsibilities:

• Attend meetings and standups to identify the scope of Currency Factory work.

• Work with application-assigned BISOs to review TARAs and CGAs.

• Update and complete assessments in collaboration with BISOs, Business Asset Owners (BAOs), and Technology Asset Owners (TAOs).

• Ensure projects remain within the defined scope of Currency Factory work.

• Report to both BISO teams and Currency Factory teams to keep stakeholders informed.

• Participate in multiple weekly meetings with currency uplift projects, the Currency Factory team, and the U.S. BISO team.

• Maintain weekly trackers and reporting to identify completed work, outstanding concerns, and progress.

• Track the success of currency uplifts in reducing asset vulnerabilities, control gaps, and end-of-life/end-of-support concerns.

TARA = Technology Asset Risk Assessment - identifies inherent risk; completed with the technology owner.

CGA = Control Gap Assessment - identifies residual risk; completed with the business owner.

BAO = Business Asset Owner

TAO = Technology Asset Owner

Time Spent in Meetings: Approximately 50%

Stakeholder Interaction: Internal

qualifications:

Required Qualifications

5+ years of experience in Information Security.

Hands-on experience with Archer risk management tools.

Experience with ServiceNow.

Experience conducting technology risk assessments and evaluating security controls.

Strong knowledge of IT governance, information security controls, and technology risk management frameworks.

Experience challenging or reviewing first-line-of-defense (1B) risk and control activities, including third-party risk activities.

Experience identifying and tracking vulnerabilities, control gaps, and remediation activities.

Ability to work independently, manage competing priorities, and communicate effectively with technical and business stakeholders.

Associate degree in technology or a related field.

Preferred Qualifications

CISSP, CISM, or similar information security certification or training.

Previous experience within banking or financial services.

Experience supporting application currency, technology lifecycle management, or infrastructure modernization initiatives.

skills:

Information Security,IT governance,ServiceNow,application security,communicate effectively,Ability to work independently,banking,Business Information,assessments,CISM,CISSP,conduct risk,internal security,governance,GRC,technology risk management,information security standards,infrastructure,financial services,project scope,Risk Assessments,Risk,risk management tools,Security,security control,security controls,information security controls,technology lifecycle,technology risks,technology risk,third-party risk,vulnerabilities,prepare reports

Equal Opportunity Employer: Race, Color, Religion, Sex, Sexual Orientation, Gender Identity, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other legally protected group status.

At Randstad Digital, we welcome people of all abilities and want to ensure that our hiring and interview process meets the needs of all applicants. If you require a reasonable accommodation to make your application or interview experience a great one, please contact

Pay offered to a successful candidate will be based on several factors including the candidate's education, work experience, work location, specific job duties, certifications, etc. In addition, Randstad Digital offers a comprehensive benefits package, including: medical, prescription, dental, vision, AD&D, and life insurance offerings, short-term disability, and a 401K plan (all benefits are based on eligibility).

This posting is open for thirty (30) days.