> Markdown version of [/jobs/ext/1957124-cybersecurity-specialist-grc](https://www.wearedevelopers.com/jobs/ext/1957124-cybersecurity-specialist-grc). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# CyberSecurity Specialist - GRC

- **Company:** Info Dinamica Inc
- **Location:** Phoenix, AZ, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Control Objectives for Information and Related Technology (COBIT), Cyber Security, Systems Development Life Cycle, IT General Controls (ITGC)
- **Published:** August 6, 2026
- **Apply:** https://www.dice.com/job-detail/f2b2b9b8-f720-4410-9850-ea22afebb134

## About the Role

5+ years of experience in Technology Risk, Information Security, IT Controls, Audit, or GRC within financial services.
Hands-on experience with IT ITAC, and Information Security control testing.
Strong knowledge of risk management, controls, RCSA, audit, and regulatory compliance.
Experience supporting SDLC and Architecture governance processes.
Excellent analytical, documentation, and stakeholder management skills.
Preferred Qualifications
Experience with AI-driven control testing automation or control monitoring solutions.
Certifications such as CISA, CRISC, CISSP, CISM, or equivalent.
Familiarity with regulatory and industry frameworks such as NIST, COBIT, ISO 27001, SOX, or FFIEC.
IT& ITAC Control Testing
Technology Risk Management
Information Security Controls
RCSA
SDLC & Architecture Risk Governance
Audit & Regulatory Compliance

## Description

We are seeking a highly skilled Technology Risk & Controls Analyst with experience in SDLC, Architecture, Information Security, and Technology Risk Management within the financial services industry. The role requires hands-on experience in IT ITAC, and Information Security control testing, risk assessments, audit support, and regulatory compliance activities. The successful candidate will act as a trusted risk advisor to technology teams while ensuring effective control design, testing, and remediation.
Key Responsibilities
Conduct IT ITAC, and Information Security control testing and document results.
Perform Risk & Control Self-Assessments (RCSA) and identify technology risks and control gaps.
Evaluate control design and operating effectiveness across SDLC, Architecture, and Technology processes.
Manage audit findings, control deficiencies, and remediation activities through closure.
Support internal/external audits, regulatory reviews, and compliance requests.
Partner with SDLC and Architecture teams to provide risk guidance and governance oversight.
Monitor risk metrics, control performance, and compliance status.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Create DSL (Domain Specific Language) on top of Swift](https://www.wearedevelopers.com/videos/707-create-dsl-domain-specific-language-on-top-of-swift)
- [Edit Your Future: Queerverse Radical AI](https://www.wearedevelopers.com/videos/909-edit-your-future-queerverse-radical-ai)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [How to govern Vibe Coding for the Enterprise](https://www.wearedevelopers.com/videos/100290-how-to-govern-vibe-coding-for-the-enterprise)
- [Answering the Million Dollar Question: Why did I Break Production?](https://www.wearedevelopers.com/videos/1171-answering-the-million-dollar-question-why-did-i-break-production)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)
- [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production)
- [Got AI ideas but no money? Here are 10 free ways to level up your AI skills with Google Cloud](https://www.wearedevelopers.com/magazine/600-got-ai-ideas-but-no-money-here-are-10-free-ways-to-level-up-your-ai-skills-with-google-cloud)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)