Audit & Compliance Analyst IV (Lead)

ServiceNow GRC / Cybersecurity Compliance

📍 VA (Hybrid Preferred) | Remote Considered
💰 Contract-to-Hire | $50/hr | Conversion Salary Approx. $125,000

We’re partnering with a leading enterprise insurance organization seeking an experienced Audit & Compliance Analyst to join its Information Security team.

This is a hands-on, execution-focused role responsible for driving policy management, compliance operations, audit coordination, and governance activities across a complex technology environment. The ideal candidate will bring strong ServiceNow GRC/IRM experience and a solid understanding of cybersecurity controls, compliance frameworks, and audit processes.

What You’ll Be Doing

• Administer and maintain ServiceNow Policy & Compliance modules, ensuring effective day-to-day operations.

• Manage ServiceNow ITSM oversight queues, supporting policy, compliance, and governance-related requests.

• Coordinate policy reviews, attestations, control testing, evidence collection, and compliance activities across the enterprise.

• Implement automation and workflow improvements to reduce manual effort and improve operational efficiency.

• Support a “test once, satisfy many” compliance approach across multiple audit and regulatory requirements.

• Develop dashboards, metrics, and reporting for security, compliance, and leadership stakeholders.

• Partner with Information Security, Risk, Legal, Audit, and IT teams to support enterprise governance initiatives.

• Coordinate audit requests, assessments, and regulatory inquiries while ensuring timely and accurate responses.

• Drive continuous improvement across compliance processes, controls, and monitoring activities.

What We’re Looking For

Required Experience

• 3+ years of ServiceNow GRC/IRM experience.

• Experience supporting cybersecurity governance, risk, and compliance programs.

• Knowledge of security frameworks such as:

  • NIST Cybersecurity Framework

  • NIST 800-53

  • ISO 27001

• Experience with:

  • Control testing

  • Evidence collection

  • Audit support

  • Policy management

  • Compliance reporting

• Strong stakeholder management and communication skills.

Preferred Qualifications

• ServiceNow ITSM experience.

• Experience supporting SOX, HIPAA, SOC 1, SOC 2, or NYDFS compliance programs.

• Familiarity with UCF (Unified Control Framework) and SIG questionnaires.

• Relevant certifications such as:

  • Security+

  • CISA

  • CISSP

  • CISM

  • CGRC

  • PMP

Why Join?

• High-visibility role supporting enterprise security and compliance initiatives.

• Opportunity to modernize and automate compliance operations.

• Work alongside Information Security, Audit, Risk, and Technology leaders.

• Contract-to-hire opportunity with long-term career growth.

• Flexible hybrid or remote working options.

If you have a passion for cybersecurity governance, compliance automation, and ServiceNow GRC, we’d love to hear from you.

Sponsorship is not available for this role and candidates need to be USC or green card holders