Governance, Risk & Compliance Analyst

Tailored Brands, Inc.; Houston (TX); On-site; USD 85,000 - 120,000; Full time

Benefits offered by this job

Medical benefits

Dental & Vision

401k

Paid holidays

Employee discounts

Job summary

Tailored Brands, Inc. is seeking a Governance Risk and Compliance Analyst to support monitoring, reporting and mitigation of data security and privacy risks within our Information Security team.

You will collaborate with business and technology stakeholders to ensure systems and data follow industry best practices, conduct third‑party risk assessments, and assist in privacy impact assessments and regulatory compliance activities.

Qualifications

• Bachelor's degree in CS, MIS, Engineering, or equivalent.
• 2+ years as a GRC/InfoSec risk & compliance analyst or similar.
• Experience with third-party assessments and cloud risk methodologies.
• Familiarity with OneTrust, ServiceNow, Jira.
• Knowledge of GDPR/CCPA/SSAE18/SOC 2/ISO/NIST/PCI/SOX is a plus.

Responsibilities

• Develop and maintain policies, procedures, standards, and guidelines.
• Collaborate with stakeholders to ensure data and systems meet best practices for security and privacy.
• Support third‑party risk assessments with legal, procurement, and business partners.
• Maintain oversight of third parties to mitigate external risk; escalate weaknesses.
• Collect data surveys and facilitate risk assessments for third‑party and internal solutions.
• Coordinate with auditors to maintain controls for compliance and privacy laws.
• Identify, evaluate, treat, and monitor security and privacy risks with stakeholders.
• Oversee GRC platforms and privacy program tooling.
• Coordinate responses to Data Subject Access Requests from consumers and employees.
• Conduct Privacy Impact Assessments and related reviews.

Skills

Project management

Time management

Communication

Presentation

Independent work

Education

Bachelor's degree in CS/MIS/Engineering or equivalent

Tools

OneTrust

ServiceNow

Jira

Job description

At Tailored Brands, we help people love the way they look and feel for their most important moments. Our Technology team loves the way they feel and thrive at work, with:

• Flexible work opportunities, including remote and hybrid options,
• Small, empowered teams that have fun delivering real value for our customers,
• And a culture that values a 50-year legacy while eagerly embracing the future

Want to be part of this? We currently have an exciting opportunity for a Governance Risk and Compliance Analyst to join our Information Security team. This role is responsible for supporting the monitoring, reporting and mitigation of Tailored Brand’s data security and privacy risks. In addition, this role is responsible for supporting and consulting in the development and implementation of solutions to minimize those risks.

What you’ll do

• Participate in developing and maintaining policies, procedures, standards, and guidelines.
• Collaborate with business and technology stakeholders to ensure that systems, processes, services, and data adhere to industry standard best practices for data security and privacy.
• Support the third-party risk assessment process, in close collaboration with legal, procurement, and business stakeholders.
• Maintain strong oversight of third parties, vendors and business partners to safeguard against undue risk presented by external entities. Escalate to security management and business unit leads when points of weakness are discovered.
• Collect data surveys and facilitate risk assessments for all third-party and internal solutions that may process or store data.
• Liaison with auditors, both internal and external, to maintain and implement controls for compliance and privacy laws.
• Collaborate with business owners and technical SMEs in the identification, evaluation, treatment, and monitoring of security and privacy risks.
• Maintain oversight in a GRC-related platform.
• Coordinate responses to Data Subject Access Requests from Consumer and Employees in support of the company regulatory compliance program.
• Conduct Privacy Impact Assessments

What you’ll bring

• Bachelor’s degree in Computer Science, Management Information Systems, Engineering, or other relevant field; or equivalent combination of education and experience required
• 2+ years of experience as a GRC Analyst, Information Security Risk and Compliance Analyst, privacy analyst or comparable role
• Experience with third-party assessments and cloud risk assessment methodologies
• Familiarity with some or all the following types of tools: OneTrust, ServiceNow, Jira
• Working knowledge of industry best practices and frameworks
• Preferred experience with cloud computing, online services, web and enterprise applications, and data analytics
• Preferred experience with data discovery, data mapping, authorization, and access management, and pseudonymization technologies
• Familiarity with General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), Statement on Standard for Attestation Engagements No. 18 (SSAE18), System and Organization Controls 2 (SOC 2), International Organization for Standardization (ISO), National Institute of Standards and Technology (NIST), Payment Card Industry (PCI), Sarbanes-Oxley Act (SOX), preferred but not required.
• Project management and time management skills
• Self-motivated with ability to not only work in group/individual setting, but able to drive action and make decisions independently with little to no direction
• The ability to communicate effectively with people at all levels
• Must be a confident communicator and presenter
• Must possess excellent organizational and planning skills
• Strong interpersonal skills, written and verbal communication

The Best Kept Secret in Retail

Tailored Brands is North America’s leading specialty retailer of menswear, famous for world-class customer service and unique offerings like tailoring and custom suits. We are best known by our brands, including Men’s Wearhouse, Jos. A. Bank, K&G Fashion Superstore, and Moores Clothing for Men in Canada.

We are emerging from the pandemic with incredible momentum. We own a unique and special market segment experiencing record-level demand. This has inspired our 3-year journey to become Legendary; an exciting strategy that leans heavily upon a strong technology foundation.

With over 1,000 stores across the US and Canada, 15,000 employees, and over 35 million customers, we’re the perfect size! Large enough to demand leading-edge enterprise-worthy technology, but small enough to move quickly and empower our teams with significant scope & autonomy.

Benefits

• Medical, prescription, dental, vision, savings accounts, wellbeing program, life/disability, commuter, accidental insurance, legal services, 401k.
• Bereavement, paid holidays, floating holidays, vacation pay, sick leave, adoption assistance, employee discounts and so much more!

Work-Life Balance

We understand the demands of work, school, family, and personal responsibilities. Through our work-life resources and programs we offer services for every stage of life to help you manage the day-to-day needs. We offer programs such as:

• Summer Fridays | from Memorial Day to Labor Day so you can enjoy a head-start to the weekend
• Holiday Early Departure | close out early the business day before a company observed holiday

Work Environment, Physical & Mental Demands

• Ability to sit and work at a computer keyboard for extended periods of time
• Ability to stoop, kneel, bend at the waist, and reach daily
• Able to lift and move up to 25 pounds occasionally
• Must utilize visual acuity, speech and hearing, hand and eye coordination and manual dexterity necessary to operate a computer and office equipment
• Hours regularly 40 hours per week, as work dictates, from our Houston, TX corporate location or a remote location.

Note: To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed are representative of the knowledge, skill, and/or ability required and are not intended to be an exhaustive list of all duties, responsibilities or qualifications associated with this job.