Audit & Compliance Analyst IV (Lead)

Audit & Compliance Analyst IV (Lead)

Location: Lynchburg, VA or Richmond, VA (Hybrid Preferred | Remote Considered)

• Pay Rate: $62.00 - $67.00 per hour

About the Role

We are seeking an experienced Audit & Compliance Analyst IV (Lead) to join our team at a well-established leader in the financial and insurance industry. This role is ideal for someone who enjoys improving processes, supporting audits, and driving operational excellence across enterprise information security programs.

Responsibilities

• Administer and support the ServiceNow Policy and Compliance modules, ensuring accurate configuration and day-to-day operations.
• Manage ServiceNow ITSM oversight queues, including intake, triage, tracking, and resolution of policy and compliance requests.
• Partner with Information Security, Risk, Compliance, Legal, Internal Audit, IT, and business teams to support enterprise governance initiatives.
• Coordinate and automate policy lifecycle activities, including policy reviews, attestations, control testing, continuous monitoring, and evidence collection.
• Improve operational efficiency through automation, standardized workflows, and streamlined compliance processes.
• Support a "test once, satisfy many" approach to meet multiple regulatory and audit requirements with minimal duplication.
• Monitor compliance controls and identify policy violations while supporting remediation efforts.
• Create and maintain standard operating procedures (SOPs), process documentation, and job aids.
• Identify opportunities to improve governance and compliance processes.
• Work independently while collaborating across distributed teams and multiple business functions.
• Manage competing priorities while maintaining exceptional attention to detail and quality.
• Execute assigned responsibilities with minimal supervision and maintain accountability for operational delivery.

Requirements

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field preferred.
• Equivalent professional IT or cybersecurity experience may be considered in lieu of a degree.
• Experience with cybersecurity governance, risk, and compliance (GRC) principles.
• Minimum of 3 years of experience with ServiceNow GRC/IRM, preferably including ServiceNow ITSM.
• Working knowledge of cybersecurity frameworks such as:
  - NIST SP 800-53
  - NIST Cybersecurity Framework (CSF)
  - ISO/IEC 27001
• Experience supporting policy management, compliance monitoring, audits, and control testing.
• Familiarity with governance tools such as Unified Control Framework (UCF) and SIG.
• Understanding of Software Development Lifecycle (SDLC) and project management principles.
• Excellent written and verbal communication skills.
• Strong organizational skills with the ability to manage multiple priorities.
• Passion for continuous improvement, automation, and operational excellence.

Desired Experience

• Experience with one or more of the following:
• Security+
• CISA
• CGRC
• CISSP
• CISM
• PMP
• Experience partnering with Risk, Compliance, Legal, and Internal Audit teams.
• Knowledge of regulatory and assurance frameworks including:
  - HIPAA
  - SOX (Sarbanes-Oxley)
  - NYDFS
  - SOC 1
  - SOC 2

Benefits

• Competitive hourly pay of $62-$67/hour
• Hybrid work environment with remote flexibility for qualified candidates
• Opportunity to support enterprise cybersecurity governance initiatives
• Work alongside highly collaborative security, compliance, audit, and technology teams
• Make a meaningful impact by improving security operations, compliance automation, and audit readiness within a leading financial services organization