Senior Governance Specialist
HybridCincinnati, Ohio, United States
Job Summary
Support the design, execution, and continuous improvement of IT governance, risk, and compliance processes across the P&C IT organization. Partner with IT leadership, application teams, and business stakeholders to identify, assess, and communicate technology risks while ensuring readiness for SOX, access governance, and audit activities. Leverage automation and analytics to modernize governance workflows, reduce manual effort, and enhance operational efficiency. Develop risk reporting dashboards and metrics to strengthen leadership visibility into control health and mitigation priorities. Facilitate IT audits by coordinating evidence requests, documenting results, and tracking remediation activities. Maintain documentation for governance processes, including control matrices and risk records, and provide guidance and training to stakeholders on compliance requirements. Monitor emerging technology and AI-enabled process improvement trends to evolve risk practices. This hybrid role requires a meaningful on-site presence to support collaboration and relationship building.
Required Qualifications
- Applicants must be authorized to work in the United States without the need for current or future sponsorship
- Bachelor's degree in Information Systems, Cybersecurity, Computer Science, Business Administration, or a related field
- Generally, a minimum of 6 years of IT governance, risk management, compliance, or audit
- Strong understanding of IT governance frameworks and regulatory compliance requirements
- Stays current on emerging IT risks, technologies, and regulatory changes affecting the insurance industry
- Proficiency in GRC tools and platforms supporting governance processes (e.g., ServiceNow, SailPoint)
- Requires a high level of understanding of organization's business and technology operations
- Ability to lead and consult on provide technical and process recommendations and provide guidance to team members
Desired Qualifications
- Completion of or continuing progress toward a professional designation preferred, such as Certified in the Governance of Enterprise IT (CGEIT), Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), or Certified Risk and Information Systems Control (CRISC)
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.