Senior Analyst, IT Governance, Risk and Compliance

🔥 1 hour ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Vestis Corporation

WebsiteLinkedInAll Job Openings

10,000+ employees

🤝 B2B

🏢 Enterprise

💰 $800M Post-IPO Debt - Vestis on 2024-02

B2B • Enterprise

Vestis Corporation is a provider of uniforms and workplace supplies focused on serving businesses across North America. Vestis operates a full-service uniform rental program and offers specialty garment processing (including cleanroom processing), floor mats, towels, linens, managed restroom services, first aid supplies and related workplace products. The company positions itself as a leader in the B2B uniform and workplace supplies category, delivering clean and safe apparel and facility supplies to a wide range of customers from Fortune 500 companies to locally owned small businesses.

📋 Description

• Support administration and continuous improvement of the IT Governance, Risk, and Compliance (GRC) program. • Maintain the enterprise IT risk register, including documentation of risk owners, mitigation plans, due dates, and risk ratings. • Facilitate periodic IT risk assessments and control reviews across infrastructure, applications, data, cloud platforms, and vendor environments. • Assist business and technology teams in identifying emerging risks and developing risk mitigation plans. • Coordinate governance committee meetings, risk reviews, and action item tracking. • Support policy management processes, including policy updates, exception tracking, and annual reviews. • Support compliance activities related to SOX, PCI DSS, privacy requirements, cybersecurity frameworks, and other regulatory obligations. • Assist in conducting technology vendor and third-party risk assessments. • Coordinate collection and review of security documentation, including SOC reports, security questionnaires, and attestations. • Monitor remediation activities associated with vendor risk findings. • Maintain vendor risk inventories and reporting. • Develop and maintain executive dashboards and reporting using Power BI and related tools. • Coordinate with security operations’ vendor partner to gather analytics to assess trends associated with technology risks, vulnerabilities, audit findings, compliance activities, and remediation performance. • Prepare materials for executive leadership, governance committees, and auditors. • Produce recurring risk and compliance reports to support management decision-making. • Partner with security operations vendor partner, infrastructure, application, and data teams to track risks identified through vulnerability management, incident response, and other security activities. • Assist with governance related to AI, cloud services, data privacy, and emerging technologies. • Support awareness initiatives that strengthen the organization's culture of governance and risk management.

🎯 Requirements

• Bachelor's degree in Information Technology, Finance, Business, or related discipline. • 10+ years’ experience in IT governance, risk management, internal audit, security operations, or related disciplines. • Experience with Microsoft Excel, Power BI, and reporting tools. • Experience supporting SOX, PCI DSS, privacy, or security programs. • Experience with GRC platforms such as ServiceNow GRC, Archer, AuditBoard, or similar tools. • Familiarity with cloud platforms (Azure, AWS, or Google Cloud). • Professional certifications such as: CRISC, CISA, CGRC, CDPSE, CISSP (Associate or progressing toward) desired.

🏖️ Benefits

• Health insurance • retirement plans • paid time off