Senior GRC Specialist

City National Bank of Florida

Senior GRC Specialist leading technology risk assessments, compliance reporting, and AI automation initiatives. Protecting sensitive information and strengthening governance for City National Bank of Florida.

Posted 8/4/2026full-timeFlorida • 🇺🇸 United StatesSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity compliance management, risk assessment, and the development of GRC strategies. Proficient in leveraging AI-driven automation tools and frameworks to enhance information security and operational efficiency.

Highest-signal resume keywords

Cybersecurity Compliance ManagementRisk Assessment and RemediationMicrosoft Power AutomateInformation Security Management FrameworksGRC Strategy Development

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cybersecurity ProgramsData EngineeringRisk MitigationControl Design and EffectivenessAI ConceptsSecurity Project ManagementData AnalysisNetwork InfrastructureCloud Security FrameworksAutomation Frameworks

Soft Skills

Effective CommunicationJudgment and IngenuityConfidentiality ManagementProblem SolvingCollaboration

Tools & Technologies

Microsoft CopilotPower AutomateAI FoundryMicrosoft Office Suite

Certifications & Qualifications

CISACRISCCISSPPL-900APL-7008

Industry Keywords

GLBAFFIECNISTGovernanceCompliance Principles

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Lead risk and control self-assessments with IT, cybersecurity, and enterprise risk management teams
Evaluate control design and operating effectiveness, determine risk exposure, and recommend corrective actions
Collaborate with GRC, engineering, SecOps, IT operations, and BCP teams on secure AI-driven automation solutions
Identify opportunities to automate cybersecurity and GRC processes using Microsoft Copilot, Power Automate, or approved tools
Develop and maintain cybersecurity and IT policies, standards, procedures, program metrics, compliance reports, and risk metrics
Engage process and control owners, auditors, and consultants to assess issue severity and implement risk-based remediation
Advise internal stakeholders on information-systems control design and risk mitigation
Communicate security issues and risks to diverse audiences and ensure compliance with applicable controls
Identify process gaps and recommend improvements to advance the Bank’s information security program maturity
Guide program leaders on risk remediation adequacy and timeliness
Perform GRC program operations, high-risk process and application evaluations, strategic planning, and automation initiatives
Work independently on complex programs and assignments with diverse teams; perform other duties as assigned

Requirements

What you’ll need

5–7 years of applied experience in cybersecurity compliance management, cybersecurity programs, data engineering, analytics or integration, audits, assessments, risk, and remediation
Knowledge of AI concepts, including LLMs, prompt design, limitations, and hallucinations
Knowledge of information security management, governance, compliance principles, laws, regulations, and frameworks including GLBA, FFIEC, and NIST
Knowledge of IT systems and processes, network infrastructure, data architecture, and protocols
Skills using AI/ML platforms and automation frameworks such as Microsoft Power Automate, Copilot Studio, and AI Foundry for agents, workflow automation, and predictive analytics
Skill applying cyber and cloud security frameworks, architecture, design, operations, controls, and service orchestration
Proficiency with Microsoft Office products, including Word, Excel, and PowerPoint
Ability to develop and implement enterprise GRC strategies and solutions
Ability to research and locate information using online and other sources
Skill in security project management and planning
Ability to maintain confidentiality and handle sensitive information appropriately
Ability to troubleshoot and operate computers and software packages
Ability to define problems, collect and analyze data, establish facts, and draw valid conclusions
Ability to use judgment and ingenuity while maintaining objectives and technical standards
Ability to communicate technical issues effectively in writing and verbally
Ability to apply a risk-based approach to audit engagement planning, execution, and reporting
Bachelor’s degree in Business Administration, Information Systems, Accounting, Finance, or related field preferred; equivalent combination of education and/or relevant professional experience may be considered in lieu of a degree
Microsoft certifications such as PL-900 or APL-7008, CISA, CRISC, or CISSP preferred but not required

Benefits

Comp & perks

Equal Opportunity Employer
Reasonable accommodations available during the hiring process