Global GRC Senior Analyst — Compliance & Risk Strategy

UGI Corporation; King of Prussia (PA); On-site; USD 120,000 - 160,000; Full time

Job summary

AmeriGas Propane, Inc. seeks a Global Cybersecurity Senior GRC Analyst to ensure regulatory, legal, and compliance obligations are met while effectively managing risk.

The role reports to the Global Cybersecurity Governance, Risk and Compliance Manager and collaborates with cross-functional teams to design, implement, and maintain GRC processes. The ideal candidate has strong analytical capabilities, extensive experience in regulatory compliance, risk management frameworks, and continuous

Qualifications

• Bachelor’s degree in Information Security, Risk Management, Computer Science, or related field.
• 6+ years of experience in GRC, risk management, or compliance roles.
• Strong understanding of GRC tools and platforms (e.g., RSA Archer, ServiceNow GRC).
• Familiarity with risk management frameworks (e.g., COBIT, FAIR) and compliance standards.
• Certifications such as CRISC, CISM, CISA or CISSP highly preferred.

Responsibilities

• Develop and maintain governance, risk, and compliance processes aligned with industry standards (NIST CSF, SOX, PCI).
• Coordinate third-party/vendor risk assessments and ongoing monitoring.
• Produce risk and compliance metrics for governance committees and leadership.
• Collaborate with IT, Legal, HR, and other stakeholders to ensure regulatory alignment.

Skills

GRC tools

Regulatory compliance

Risk management

Stakeholder comms

Education

Bachelor's degree in Information Security or related field

Tools

RSA Archer

ServiceNow GRC

Job description

AmeriGas Propane, Inc. seeks a Global Cybersecurity Senior GRC Analyst to ensure regulatory, legal, and compliance obligations are met while effectively managing risk.

The role reports to the Global Cybersecurity Governance, Risk and Compliance Manager and collaborates with cross-functional teams to design, implement, and maintain GRC processes. The ideal candidate has strong analytical capabilities, extensive experience in regulatory compliance, risk management frameworks, and continuous