Governance Risk Compliance Jobs in Connecticut (NOW HIRING)

• Partner with business units and IT leadership to develop, maintain, and operationalize information security policies, standards, and procedures
• Collaborate with stakeholders across the enterprise to formulate security strategies and risk reduction guidelines that align with business objectives.
• Consult with business and technology teams on building secure processes and information systems from the ground up
• Help evolve the security awareness program, translating technical risk into clear communication for employees at all levels within the organization
• Lead efforts with business units to assess, document, accept, and/or mitigate risk associated with enterprise-wide initiatives and third-party relationships
• Perform detailed threat and vulnerability analysis, combining sound analytical skills with advanced knowledge of IT security risks
• Evaluate the severity and potential impact of identified threats, translating findings into actionable recommendations for leadership and business stakeholders
• Maintain a current understanding of the threat landscape through ongoing research into emerging risks and their potential impact on our environment
• Lead and perform security assessments of third parties and partners, documenting findings and driving remediation
• Serve as a key resource in preparing for internal audits, external audits, and state regulatory examinations including drafting responses, managing evidence, and tracking remediation commitments
• Monitor ongoing compliance with information security policies and assist business units in managing exceptions to policy and standards
• Provide oversight of managed security services, including vulnerability management, firewall operations, Security Operations Center, and data loss prevention
• Investigate, document, and follow through on information security incidents and policy violations, ensuring appropriate resolution and lessons learned
• Identify and implement opportunities to automate manual GRC and compliance workflows, reducing operational overhead and improving program consistency and accuracy
• Develop metrics, dashboards, and reporting mechanisms to provide leadership clear visibility into risk posture and program health
• Evaluate new and emerging security technologies leading proof-of-concept assessments and making recommendations to management

Requirements

• Bachelor’s degree in information security, Computer Science, Information Systems, or a related field.
• Minimum of 7 years of cybersecurity experience with strong expertise in governance, risk, compliance, or audit support functions.
• Industry-recognized certification such as CISSP, CISM, CRISC, or equivalent ISACA or GIAC credential.
• Working knowledge of security frameworks including NIST 800-53, ISO 27001, and/or NIST CSF.
• Demonstrated experience supporting regulatory examinations or external audits, including evidence preparation and remediation tracking.
• Practical experience with cloud security controls (Azure, Oracle Cloud, or Microsoft 365).
• Experience identifying and implementing process automation within GRC or compliance workflows.
• Exceptional written and verbal communication skills, with the ability to convey technical risk clearly to non-technical audiences.
• Strong organizational skills with the ability to manage multiple workstreams, priorities, and stakeholders simultaneously
• Experience in the insurance or financial services industry, particularly in environments subject to state insurance department oversight is preferred
• Familiarity with GRC platforms or security automation tooling (e.g., ServiceNow GRC, Archer, or similar) is a plus
• Experience scripting or light automation skills (Python, PowerShell) applied to security or compliance use cases is a plus
• Familiarity with vulnerability management programs and third-party risk assessment methodologies is preferred

Core Competencies

Demonstrates extensive expertise in cybersecurity governance, risk management, and compliance, with a strong focus on developing and operationalizing security policies and procedures. Proficient in translating technical risks into clear communication for diverse stakeholders while leading security assessments and managing third-party relationships.

Highest-signal resume keywords

• Cybersecurity Experience
• Governance, Risk, Compliance (GRC)
• CISSP, CISM, CRISC Certification
• NIST 800-53, ISO 27001 Frameworks
• Cloud Security Controls (Azure, Oracle Cloud, Microsoft 365)

ATS Optimization Keywords

Hard Skills

• Threat and Vulnerability Analysis
• Security Assessments
• Process Automation
• Scripting (Python, PowerShell)
• Metrics and Reporting Development

Soft Skills

• Exceptional Written Communication
• Strong Organizational Skills

Certifications & Qualifications

• CISSP
• CISM
• CRISC

Industry Keywords

• Insurance Industry
• Financial Services
• Regulatory Examinations
• Third-Party Risk Assessment

Tools & Technologies

• ServiceNow GRC
• Archer
• Security Operations Center
• Data Loss Prevention