Job Description One of our top financial customers is seeking a Lead Information Security Analyst with expertise in ServiceNow GRC to join their security governance organization. As a Lead Information Security Analyst, you will be responsible for control validation and effectiveness, preparing audit and regulatory responses, and executive-level reporting. The ideal candidate will have deep knowledge of banking regulations, risk management practices, and a strong background in information security governance and audit practices. In this role, you will lead enterprise PCI DSS compliance initiatives, partnering across security, technology, risk, and audit teams to ensure sustainable control implementation and ongoing regulatory readiness. You will serve as a trusted advisor to leadership by driving control testing, risk assessments, policy governance, and remediation efforts while translating complex security and compliance requirements into actionable business outcomes. This position requires a strategic mindset, strong stakeholder management skills, and the ability to effectively communicate risk posture and compliance performance to both technical and executive audiences. We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com.

To learn more about how we collect, keep, and process your private information, please review

Insight Global's Workforce Privacy Policy:

https://insightglobal.com/workforce-privacy-policy/. Skills and Requirements

• 5-8+ years of experience in information security governance, risk, and compliance
• 3+ years minimum of Payment Card Industry (PCI) environment (Payment Card Industry Data Security Standard/PCI DSS)
• 3+ years of hands-on experience with ServiceNow IRM (formerly ServiceNow GRC)
• Strong and hands-on experience with most recent versions of ServiceNow IRM from Xanadu (2024 release) onward which include: Xanadu (2024), Yokohama (Q1 2025), Zurich (Q4 2025), and Australia (expected Q2 2026)
• Experience developing security metrics, KRIs, KPIs, and executive-level risk reporting.
• Security controls experience; experience designing, testing, assessing, and validating security controls within a regulated environment.
• Industry framework experience including: MAR, NIST, COBIT, and/or

ISO 27001

• Policy experience; experience managing policy governance lifecycles, standards reviews, stakeholder approvals, and regulatory alignment.
• Audit experience; experience leading internal audits, external audits, regulatory examinations, and remediation efforts.
• Experience supporting regulatory examinations and responding to regulator requests.
• Experience with banking regulatory requirements and industry frameworks including:

NIST CSF 2.0, CIS V8

• Experience that aligns with security awareness trainings that includes phishing
• Bachelor's degree in Information Security, Computer Science, Risk Management, or a related field.
• Must have active certification in one or more of the below

GRC Generalist Certifications:

• ServiceNow Certified Implementation Specialist
• GRC (preferred)
• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Certified in Risk and Information Systems Control (CRISC)
• Certified Information Systems Auditor (CISA)
• Master's degree or MBA with a concentration in Information Assurance or Financial Risk