| Job ID |
2026-5958
|
Category |
Information Technology
|
Type |
Full-Time
|
Workplace policy |
Hybrid
|
Overview
The GRC Specialist Senior is responsible for conducting security assessments, control testing, issues management, and the development of metrics and compliance reports in alignment with the Bank's technology risk management framework, regulatory requirements, and departmental policies, while collaborating with auditors and risk management to safeguard the Bank's assets and sensitive information. This role also leads efforts to automate cybersecurity and GRC processes using approved AI-enabled technologies to improve efficiency and reduce manual workload. The position exercises discretion and independent judgment to evaluate risk, interpret regulatory requirements, and establish automated control procedures aligned with applicable frameworks and governance standards.
What You'll Do:
Lead risk and control self-assessments with IT and cybersecurity subject matter experts and the enterprise risk management team.
- Evaluate control design and operating effectiveness, determining risk exposure and recommending corrective actions to address identified gaps.
- Collaborate with GRC, engineering, SecOps, IT operations, and BCP teams to define requirements and ensure scalable, secure, and maintainable AI-driven automation solutions. Identify opportunities to develop automated solutions using Microsoft Copilot, Power Automate, or another approved automation tool.
- Develop and maintain cybersecurity and IT policies, standards, procedures, and program metrics; and develop automated compliance reports and risk metrics for executive leadership to improve decision-making and reduce operational risk.
- Own engagement with process and control owners, auditors, and consultants by assessing issue severity and ensuring appropriate risk-based remediation actions are defined, prioritized, and implemented.
- Advise internal stakeholders on internal control design for ongoing risk mitigation of information systems based on regulatory requirements and best practices.
- Communicate security issues and risks effectively to diverse audiences and ensure compliance with applicable controls based on a unified framework.
- Identify and address process gaps proactively, recommending improvements to advance the Bank's information security program maturity in alignment with company goals.
- Guide program leaders on risk remediation efforts, ensuring adequacy of response and timeliness based on risk severity.
- Perform major assignments related to GRC program operations, including evaluation of high-risk processes and applications, strategic planning inputs, and execution of automation initiatives.
- Work independently on complex programs and assignments with diverse teams and perform other duties as assigned.
Qualifications
- 5-7 years of of applied work experience in cyber security compliance management, cyber security programs, data engineering, analytics or integration, audits, assessments, risk and remediation.
- Knowledge of AI concepts (LLMs, prompt design, limitations, hallucinations, etc.)
- Knowledge of information security management, governance, and compliance principles, practices, laws, rules, regulations, and frameworks such as GLBA, FFIEC, and NIST.
- Knowledge of IT systems and processes, network infrastructure, data architecture, and protocols.
- Skills in using AI/ML platforms and automation frameworks, such as Microsoft AI solutions (Power Automate, Copilot Studio) and AI Foundry, for developing agents, workflow automation, and predictive analytics in cybersecurity and GRC environments (desirable).
- Skill in applying cyber and cloud security frameworks, architecture, design, operations, controls, and service orchestration.
- Proficiency in Microsoft Office products (Word, Excel, PowerPoint).
- Ability to develop and implement enterprise governance, risk, and compliance strategies and solutions.
- Ability to research and locate information related to internal and external organizations using online and other sources.
- Skill in security project management and planning.
- Ability to maintain confidentiality and handle sensitive information appropriately.
- Ability to troubleshoot and operate computers and various software packages.
- Ability to define problems, collect and analyze data, establish facts, and draw valid conclusions.
- Ability to use judgment and ingenuity in maintaining objectives and technical standards.
- Ability to communicate technical issues effectively to diverse audiences, both in writing and verbally.
- Ability to apply a risk-based approach to planning, executing, and reporting on audit engagements and auditing processes.
Education
- Bachelor's Degree in Business Administration, Information Systems, Accounting, Finance, or a related field, preferred.
- Or;an equivalent combination of education and/or relevant professional experience may be considered in lieu of a degree.
Certification in any of the following is preferred but not required:
- Microsoft certifications such as Power Platform Fundamentals (PL-900) or Copilot Studio Applied Skills (APL-7008)
- CISA (Certified Information Systems Auditor), CRISC (Certified in Risk and Information Systems Control), or CISSP (Certified Information Systems Security Professional).
Special Instructions to Candidates
Equal Opportunity City National Bank of Florida is an Equal Opportunity Employer. We do not discriminate based on race, color, religion, sex, national origin, age, disability, genetic information, protected veteran status, or any status protected by federal, state, or Florida law. We comply with the ADA and applicable Florida laws. Interview Guidelines To ensure a fair interview process, the use of AI-enabled devices (e.g., AI glasses or similar technology) is not permitted during interviews. Accommodations If you require a reasonable accommodation to apply or participate in the hiring process, please contact our Talent Attraction team at talent.attraction@citynational.com |
City National Bank
Jun 18, 2026