IT GRC Analyst
业务单位：信息技术行业：没有产业概述 Houlihan Lokey, Inc. (NYSE:HLI) 是一个领先的全球投资银行，以提供独立的战略和金融咨询给公司，财务赞助商和政府而闻名。凭借独特的深入行业专业知识，广泛的国际 पहुंच和基于信任的合作方法，该公司在合并与收购，资本解决方案，金融重组以及金融和估值咨询方面提供创新，综合性的解决方案。我们的无与伦比交易量提供了差异化，数据驱动的观点，帮助客户实现最关键目标。为了了解更多关于 Houlihan Lokey 的信息，请访问 HL.com. About the Team 我们相信随着我们个人成长，我们也将成为一个信息技术团队，使我们能够为 Houlihan LokEY 的整体增长做出贡献。我们接受挑战并尝试新事物，始终寻找改进的方法。我们在任何地方都提供技术产品和服务，以便商业可以发生。我们喜欢我们工作的地方，我们与谁合作以及我们所做的东西。我们培养了一个文化，我们都壮成长。描述：IT 治理，风险和合规是如何保护客户信任的中心，Houlihan Lok 作为全球金融机构运作。作为 GRC 分析师，你帮助确保公司业务的技术运行在强有力的控制，健全风险管理和持续监管准备基础上。工作与每一个新的法规，威胁和客户期望更重要。与领导 GRC 分析师一起工作并向 IT GRC 经理报告，你将支持治理，风险和合规努力，涵盖 GDPR,DORA 和 Sarbanes-Oxley 等框架，与企业内部和外部审计员和控制所有者合作。对于拥有23年的 GRC 或 IT 审计经验的人来说，这是一个理想的机会，谁想在技术，风险和金融服务交叉点建立职业生涯，在一支将从第一天开始投资你的增长团队。主要责任：·支持开发，维护和不断改善与行业最佳实践和监管要求一致的 IT 治理框架，政策和程序。·帮助识别，评估和跟踪 IT 风险，包括网络安全，数据隐私和运营风险，并有助于提高信息管理风险。
查看英文原文
Business Unit:
Information TechnologyIndustry:
No IndustryOverview
Houlihan Lokey, Inc. (NYSE:HLI) is a leading global investment bank recognized for delivering independent strategic and financial advice to corporations, financial sponsors, and governments. With uniquely deep industry expertise, broad international reach, and a partnership approach rooted in trust, the firm provides innovative, integrated solutions across mergers and acquisitions, capital solutions, financial restructuring, and financial and valuation advisory. Our unmatched transaction volumes provide differentiated, data-driven perspectives that help our clients achieve their most critical goals. To learn more about Houlihan Lokey, please visit HL.com.About the Team
We believe that as we grow individually, we also grow as an Information Technology team allowing us to contribute to the overall growth of Houlihan Lokey. We embrace challenges and try new things, always looking for ways to improve. We deliver technology products and services enabled everywhere, so business can happen anywhere. We like where we work, who we work with, and what we do. We cultivate a culture where we all thrive.
Description:
IT governance, risk, and compliance sit at the center of how Houlihan Lokey protects client trust and operates as a global financial institution. As a GRC Analyst, you help ensure that the technology powering the firm's business runs on a foundation of strong controls, sound risk management, and continuous regulatory readiness — work that matters more with every new regulation, threat, and client expectation the industry takes on.
Working alongside a Lead GRC Analyst and reporting to the IT GRC Manager, you will support governance, risk, and compliance efforts spanning frameworks such as GDPR, DORA, and Sarbanes-Oxley, partnering with internal and external auditors and control owners across the enterprise. It's an ideal opportunity for someone with 2–3 years of GRC or IT audit experience who wants to build a career at the intersection of technology, risk, and financial services, inside a team that will invest in your growth from day one.
Key Responsibilities:
· Support the development, maintenance, and continuous improvement of IT governance frameworks, policies, and procedures aligned with industry best practices and regulatory requirements.
· Assist in identifying, evaluating, and tracking IT risks — including cybersecurity, data privacy, and operational risk — and contribute to risk mitigation plans that address identified vulnerabilities.
· Partner with HL Compliance to ensure IT systems align with regulations such as GDPR, DORA, and SOX, and other standards relevant to the financial services industry.
· Conduct assurance activities, including security assessments and issue management, and collaborate with IT teams to strengthen security compliance and the overall control environment.
· Plan and execute IT audits that evaluate the effectiveness of internal controls, risk management, and governance processes, supporting remediation tracking under the guidance of the Lead GRC Analyst and IT GRC Manager.
· Prepare clear, well-organized reports and documentation on IT governance, risk, and compliance activities for review by team leadership.
· Communicate effectively with internal and external stakeholders — including auditors, regulators, and clients — on GRC-related matters, including timely, accurate responses to client security questionnaires.
· Support the development of IT governance and compliance training materials in partnership with IT, Compliance, and Audit teams.
· Contribute to vendor risk management, including assessing SOC reports and ISO certifications and applying a clear understanding of vendor risk tiering.
Qualifications & Experience:
Required
· Bachelor's degree in Information Technology, Computer Science, Finance, Accounting, or a related field.
· 2–3 years of experience in IT governance, risk management, compliance, or IT audit, ideally within the financial services industry.
· Working knowledge of IT regulatory frameworks such as GDPR, DORA, and SOX, or comparable international standards.
· Strong analytical and problem-solving skills, with the ability to identify and help mitigate risk effectively.
· Excellent communication and interpersonal skills, with the ability to collaborate across cross-functional teams.
· Proven ability to manage multiple projects and priorities in a fast-paced environment.
Preferred
· Progress toward, or interest in, professional certifications such as CISA, CRISC, Security+, or equivalent.
· Familiarity with GRC or audit management platforms and tools.
· Awareness of NIST and COBIT frameworks.
· Strong Excel skills, including data management and functions such as VLOOKUP, XLOOKUP, and XMATCH.
· Experience preparing materials for internal and external audit requests.
· Understanding of vendor risk management, including SOC report and ISO certification review.
Soft Skills:
· Communicate with clarity and professionalism, balancing accuracy with approachability across a range of audiences.
· Bring a solutions-focused mindset, willing to go above and beyond to create positive outcomes.
· Demonstrate high emotional intelligence, staying calm, positive, and thoughtful in challenging situations.
· Approach work with curiosity and a growth-oriented mindset, continuously building GRC and technical expertise.
· Operate with a high degree of professionalism and dependability, with a commitment to the firm's mission and values.
· Stay comfortable working with AI-enabled GRC, audit, and analytics tools, using them to streamline risk assessments, control testing, and reporting.
· Bring curiosity to new technologies, proactively identifying opportunities to automate or streamline governance, risk, and compliance workflows.
We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, gender identity, sexual orientation, protected veteran status, or any other characteristic protected by law.
Originally posted on Himalayas