Back to jobs
Intellibee Inc
GRC Modernization Specialist
Malvern On-site 10+ yrs exp IT Services and IT Consulting 48 employees
Control DesignGRC ModernizationRisk ManagementCybersecurity GovernanceContinuous Controls Monitoring
Requirements
Candidates need over 8 years of experience in cybersecurity risk, governance, or internal audit, preferably within financial services. Proficiency in industry frameworks like NIST and ISO, along with strong stakeholder influence skills, is required.
Job Description
GRC Modernization Specialist, Malvern, PA, US
GRC Modernization Specialist
Responsibilities
Role Overview
As part of Client's GRC Modernization Program, we are seeking experienced Control Design & Modernization Specialists to help transform and standardize the control environment across Enterprise Security & Fraud (ES&F). This role is focused on designing the future-state control framework. Successful candidates will review existing policies, standards, risk assessments, audit observations, regulatory requirements, and current controls to identify opportunities for simplification, standardization, automation, and Continuous Controls Monitoring (CCM). Working closely with control owners, risk partners, and subject matter experts, you will design actionable, measurable, and scalable controls that support Client's evolving risk, regulatory, and business needs.
Key Responsibilities
Control Assessment & Discovery
Required Qualifications
GRC Modernization Specialist
Responsibilities
Role Overview
As part of Client's GRC Modernization Program, we are seeking experienced Control Design & Modernization Specialists to help transform and standardize the control environment across Enterprise Security & Fraud (ES&F). This role is focused on designing the future-state control framework. Successful candidates will review existing policies, standards, risk assessments, audit observations, regulatory requirements, and current controls to identify opportunities for simplification, standardization, automation, and Continuous Controls Monitoring (CCM). Working closely with control owners, risk partners, and subject matter experts, you will design actionable, measurable, and scalable controls that support Client's evolving risk, regulatory, and business needs.
Key Responsibilities
Control Assessment & Discovery
- Review policies, standards, procedures, risk assessments, audit findings, regulatory requirements, and existing control inventories.
- Assess current-state controls to identify gaps, overlaps, redundancies, and opportunities for improvement.
- Evaluate existing control frameworks against industry best practices and regulatory expectations.
- Design and document future-state controls that are risk-based, measurable, testable, and scalable.
- Develop clear control objectives, control activities, ownership models, evidence requirements, and implementation guidance.
- Rationalize and standardize controls across multiple ES&F functions to improve consistency and effectiveness.
- Design controls with automation and Continuous Controls Monitoring (CCM) capabilities in mind.
- Facilitate workshops and working sessions with security, technology, risk, compliance, audit, and business stakeholders.
- Challenge legacy approaches and drive alignment on future-state control designs.
- Build consensus across diverse stakeholder groups and ensure control designs meet business and regulatory expectations.
- Contribute to the development of enterprise control libraries, control standards, taxonomies, and framework mappings.
- Support broader GRC modernization initiatives focused on improving control effectiveness, reducing complexity, and enabling scalable assurance.
- Identify opportunities to leverage automation, analytics, AI, and modern GRC practices to enhance control maturity.
Required Qualifications
- 8+ years of experience in cybersecurity, risk management, governance, compliance, controls design, internal audit, or related disciplines.
- Proven experience designing, enhancing, or transforming controls within financial services or other highly regulated industries.
- Robust experience translating policies, standards, risks, audit findings, and regulatory requirements into effective control designs.
- Deep understanding of control lifecycle management, including control design, implementation, testing, monitoring, remediation, and continuous improvement.
- Demonstrated ability to lead workshops and influence senior stakeholders.
- Robust analytical, documentation, and problem-solving skills.
- Excellent written and verbal communication skills.
- Experience supporting large-scale GRC modernization, control transformation, or cybersecurity governance initiatives.
- Experience designing controls for Continuous Controls Monitoring (CCM) and automated assurance capabilities.
- Knowledge of AI Governance, AI Risk Management, and emerging AI-related regulatory requirements.
- Experience developing control libraries, taxonomies, framework mappings, and enterprise control standards.
- NIST Cybersecurity Framework (CSF)
- NIST 800-53
- ISO 27002
- CIS Controls
- COBIT
- Consulting, risk advisory, internal audit, or Big Four experience robustly preferred.
- Professional certifications such as CISSP, CISM, CISA, CRISC, CIA, or CPA preferred.
- Long-Term Stability: Join us on a multi-year opportunities with room to grow.
- Comprehensive Health Coverage: Access quality healthcare benefits to keep you and your family well.
- Future Planning: Enroll in our 401(k) program and invest in your financial security.
- GC Assistance: We support immediate Green Card processing, if required.
Education
Professional Certificate
Skills
Control DesignGRC ModernizationRisk ManagementCybersecurity GovernanceContinuous Controls MonitoringRegulatory ComplianceInternal AuditStakeholder ManagementNIST CSFNIST 800-53ISO 27002CIS ControlsCOBITAI GovernanceControl RationalizationFramework Mapping
About Intellibee Inc
Intellibee is a global Information Technology services company that provides enterprise integration services. Intellibee offers a wide range of expertise in the cloud, mobile application development and analytics in big data. Intellibee has state-of-the-art engineering centers located in the U.S and India. Intellibee develops projects for its clients in government and manufacturing industries using cloud platforms using prototype driven agile methodologies.