GRC Tools Specialist; SAIFocus Phoenix AZ Locals

We are seeking an experienced GRC Tools Specialist with strong SAI
360 expertise to support IT Compliance across Infrastructure and Operations. This role plays a critical part in audit execution, issue management, remediation tracking, and infrastructure documentation while partnering closely with ERM, 1

RCO, and technology teams.

The ideal candidate is hands-on, detail-oriented, and comfortable driving audit outcomes in a fast-paced, regulated environment.

Key Responsibilities

• Manage IT compliance activities using SAI
  360, including audit issues, evidence collection, remediation tracking, and Management Action Plans (MAPs)
• Coordinate and validate audit evidence from infrastructure systems, ensuring completeness and regulatory alignment
• Drive issue remediation by leading weekly meetings, tracking progress, and escalating risks as needed
• Review audit findings and support controls testing and documentation aligned with SOX, COSO, NIST, COBIT, and CIS
• Maintain and update Workfront dashboards with weekly status on open issues and MAPs
• Partner with ERM and 1
  
  RCO teams to identify gaps and support timely issue closure
• Leverage Service Now for incident, change, and risk exception management
• Automate and deliver monthly reporting for Issues, MAPs, and IT exceptions
• Create and maintain clear infrastructure documentation, policies, procedures, and user guides
• Mentor team members and promote consistent GRC best practices

Required Qualifications

• 7+ years of experience in IT audit, technology risk, or GRC
• Hands-on experience with SAI
  360 (required)
• Strong knowledge of SOX, COSO, NIST, COBIT, CIS frameworks
• Experience with audit evidence collection, controls testing, and remediation
• Familiarity with cloud environments (AWS, Azure, or GCP)
• Experience working in Agile/Scrum environments
• Proficiency with Service Now and project tracking tools such as Workfront
• Excellent communication skills with the ability to engage technical and non-technical stakeholders

Nice to Have

• Financial services industry experience
• Prior ownership of audit issues and MAPs end-to-end
• Experience automating compliance or audit reporting