Governance, Risk & Compliance (GRC) Specialist Senior

Overview

We are looking for a highly skilled Senior Cybersecurity Governance, Risk & Compliance (GRC) Specialist to partner directly with our, Information Security leadership team, Technology, Risk Management, Internal Audit, and business executives to strengthen the Bank's cybersecurity posture and resilience.

This role is ideal for a cybersecurity professional who combines technical expertise with risk and governance experience and wants to influence enterprise-wide decisions in a highly regulated environment.

If you're looking for an opportunity to move beyond checklists and compliance administration and instead drive meaningful cybersecurity risk management initiatives, we want to talk to you.

What You'll Do

As a Senior Cybersecurity GRC Specialist, you will serve as a trusted advisor and partner in managing technology and cybersecurity risk across the Bank.

• Performing enterprise technology and cybersecurity risk assessments.
• Evaluating the effectiveness of security controls and control assurance activities.
• Supporting internal audits, regulatory examinations, and independent assessments.
• Driving issue management, remediation tracking, and risk mitigation efforts.
• Developing risk metrics, executive reporting, and governance presentations.
• Supporting information security policies, standards, and governance programs.
• Partnering with Technology and Information Security teams on cloud, infrastructure, application, and emerging technology initiatives.
• Contributing to AI governance, automation, and cyber risk innovation efforts.
• Identifying opportunities to improve processes through automation and data-driven insights.
• Advising stakeholders on regulatory expectations, industry standards, and cybersecurity best practices.

Qualifications

Preferred Experience

• Cybersecurity Governance, Risk & Compliance
• Technology Risk Management
• Information Security Programs
• IT Audit
• Cyber Risk Management
• Internal Controls
• Regulatory Compliance
• Cloud Security Governance
• AI Governance and Risk
• Financial Services or Banking

Experience

5-8+ years of progressive experience in one or more of the following:

• Information Security
• Cybersecurity Risk Management
• Governance, Risk & Compliance
• IT Audit
• Technology Risk
• Security Assessments
• Controls Assurance
• Risk Remediation

Technical Knowledge

Experience with several of the following:

• NIST Cybersecurity Framework
• NIST 800-53
• FFIEC
• GLBA
• CIS Controls
• Cloud Security Frameworks
• Risk Assessment Methodologies
• Controls Testing and Assurance
• Security Governance Programs
• AI Governance and Risk Management
• Exposure to Microsoft Copilot, Power Platform, AI automation, or emerging technologies is a plus.

The Candidate We Want

We're not looking for someone who only writes policies or only performs audits.

We're seeking a professional who understands cybersecurity operations, technology risks, governance requirements, and business objectives and can bring those disciplines together to help protect the Bank while enabling growth.

This position offers exceptional visibility, meaningful influence, and a chance to help shape the future of cybersecurity at City National Bank of Florida.

Education

Bachelor's degree in Information Systems, Cybersecurity, Computer Science, Business, Accounting, Finance, or related field preferred.

Preferred certifications:

• CISSP
• CRISC
• CISA
• CISM
• CGRC
• Microsoft PL-900
• Microsoft Security Certifications
• Microsoft Copilot or AI-related certifications

Special Instructions to Candidates

Interview Guidelines

To ensure a fair and consistent interview process, applicants are not permitted to use AI-enabled devices during interviews, including AI glasses or similar wearable technology that can record, transmit, or generate real-time information.

Applicants who require a reasonable accommodation to participate in the interview process should contact in advance of the interview to submit an accommodation request. City National Bank of Florida will engage in the interactive process and provide reasonable accommodations in accordance with applicable law.