Position Title :: Senior IT Controls & Risk Specialist
Locations :: Northbrook, IL | 1-Day onsite/week
Job Description:
AgreeYa is a global Systems Integrator and is seeking an experienced Senior IT Controls & Risk Specialist to join our growing team in Northbrook IL.
Position Summary
The Senior IT Controls & Risk Specialist will operate as a second-line of defense function supporting IT Governance, Risk, and Compliance (IT GRC). This role is responsible for strengthening IT control frameworks, supporting audit remediation efforts, maturing IT risk assessment practices, and enhancing governance capabilities in a fast-growing, publicly traded environment.
This position requires a well-rounded, entrepreneurial professional capable of both operational execution and strategic build activities.
Key Responsibilities
IT Risk & Governance (Second Line)
- Perform independent IT risk assessments for key initiatives and technology programs
- Provide oversight and challenge to first-line IT control activities
- Support enhancement of IT risk methodology and risk quantification practices
- Partner with technology leadership to embed governance practices
IT Controls & Compliance
- Design, evaluate, and test IT General Controls (ITGCs)
- Support SOX IT compliance activities (if applicable)
- Lead remediation efforts for audit findings and management action plans
- Ensure appropriate documentation and evidence collection
Audit & Regulatory Response
- Drive timely response to internal and external audit findings
- Develop and monitor management remediation plans
- Track closure of control gaps and validate effectiveness
Program Maturity & Build
- Enhance IT control framework maturity
- Improve risk assessment processes and tooling
- Identify automation and process optimization opportunities
- Contribute to long-term GRC roadmap planning
Required Qualifications
- 6 10+ years of experience in IT Risk, IT Controls, IT Audit, or IT GRC
- Strong understanding of:
o IT General Controls (ITGC)
o Risk assessment methodologies
o Governance frameworks (COBIT, ISO 27001, NIST, etc.)
- Experience supporting audit remediation and compliance initiatives
- Ability to operate in both strategic and hands-on execution modes
- Strong communication skills and ability to influence stakeholders
Preferred Qualifications
- Experience in publicly traded or highly regulated environments
- Certifications such as CISA, CRISC, CISSP, or equivalent
- Experience with GRC platforms
About AgreeYa:
AgreeYa is a global systems integrator delivering a competitive advantage for its customers through software, solutions, and services. Established in 1999, AgreeYa is headquartered in Folsom, California, with a global footprint and a team of more than 1,800+ professionals across offices. AgreeYa works with 550+ organizations ranging from Fortune 100 firms to small and large businesses across industries such as Telecom, Banking, Financial Services & Insurance, Healthcare, Utility & Energy, Technology, Public Sector, Pharma & Biotech, Retail, Client, and others. Please visit us at for more information.
Equal Opportunity:
AgreeYa is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, gender identity, sexual orientation, national origin, disability, veteran status or other protected characteristics. Visit our website at to learn about our Career & Culture.