IT GRC Analyst

Business Unit:

Industry:

Overview

About the Team

We believe that as we grow individually, we also grow as an Information Technology team allowing us to contribute to the overall growth of Houlihan Lokey. We embrace challenges and try new things, always looking for ways to improve. We deliver technology products and services enabled everywhere, so business can happen anywhere. We like where we work, who we work with, and what we do. We cultivate a culture where we all thrive.

Description:

IT governance, risk, and compliance sit at the center of how Houlihan Lokey protects client trust and operates as a global financial institution. As a GRC Analyst, you help ensure that the technology powering the firm's business runs on a foundation of strong controls, sound risk management, and continuous regulatory readiness — work that matters more with every new regulation, threat, and client expectation the industry takes on.

Working alongside a Lead GRC Analyst and reporting to the IT GRC Manager, you will support governance, risk, and compliance efforts spanning frameworks such as GDPR, DORA, and Sarbanes-Oxley, partnering with internal and external auditors and control owners across the enterprise. It's an ideal opportunity for someone with 2–3 years of GRC or IT audit experience who wants to build a career at the intersection of technology, risk, and financial services, inside a team that will invest in your growth from day one.

Key Responsibilities:

• Support the development, maintenance, and continuous improvement of IT governance frameworks, policies, and procedures aligned with industry best practices and regulatory requirements.

• Assist in identifying, evaluating, and tracking IT risks — including cybersecurity, data privacy, and operational risk — and contribute to risk mitigation plans that address identified vulnerabilities.

• Partner with HL Compliance to ensure IT systems align with regulations such as GDPR, DORA, and SOX, and other standards relevant to the financial services industry.

• Conduct assurance activities, including security assessments and issue management, and collaborate with IT teams to strengthen security compliance and the overall control environment.

• Plan and execute IT audits that evaluate the effectiveness of internal controls, risk management, and governance processes, supporting remediation tracking under the guidance of the Lead GRC Analyst and IT GRC Manager.

• Prepare clear, well-organized reports and documentation on IT governance, risk, and compliance activities for review by team leadership.

• Communicate effectively with internal and external stakeholders — including auditors, regulators, and clients — on GRC-related matters, including timely, accurate responses to client security questionnaires.

• Support the development of IT governance and compliance training materials in partnership with IT, Compliance, and Audit teams.

• Contribute to vendor risk management, including assessing SOC reports and ISO certifications and applying a clear understanding of vendor risk tiering.

Qualifications & Experience:

Required

• Bachelor's degree in Information Technology, Computer Science, Finance, Accounting, or a related field.

• 2–3 years of experience in IT governance, risk management, compliance, or IT audit, ideally within the financial services industry.

• Working knowledge of IT regulatory frameworks such as GDPR, DORA, and SOX, or comparable international standards.

• Strong analytical and problem-solving skills, with the ability to identify and help mitigate risk effectively.

• Excellent communication and interpersonal skills, with the ability to collaborate across cross-functional teams.

• Proven ability to manage multiple projects and priorities in a fast-paced environment.

Preferred

• Progress toward, or interest in, professional certifications such as CISA, CRISC, Security+, or equivalent.

• Familiarity with GRC or audit management platforms and tools.

• Awareness of NIST and COBIT frameworks.

• Strong Excel skills, including data management and functions such as VLOOKUP, XLOOKUP, and XMATCH.

• Experience preparing materials for internal and external audit requests.

• Understanding of vendor risk management, including SOC report and ISO certification review.

Soft Skills:

• Communicate with clarity and professionalism, balancing accuracy with approachability across a range of audiences.

• Bring a solutions-focused mindset, willing to go above and beyond to create positive outcomes.

• Demonstrate high emotional intelligence, staying calm, positive, and thoughtful in challenging situations.

• Approach work with curiosity and a growth-oriented mindset, continuously building GRC and technical expertise.

• Operate with a high degree of professionalism and dependability, with a commitment to the firm's mission and values.

• Stay comfortable working with AI-enabled GRC, audit, and analytics tools, using them to streamline risk assessments, control testing, and reporting.

• Bring curiosity to new technologies, proactively identifying opportunities to automate or streamline governance, risk, and compliance workflows.

We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, gender identity, sexual orientation, protected veteran status, or any other characteristic protected by law.