GRC Analyst II - Remote

UNFI; Providence (RI); Remote; USD 80,000 - 110,000; Full time

Job summary

UNFI is seeking a GRC Analyst II to implement and execute on a comprehensive Security Governance and Compliance program. This remote role involves working across the organization to ensure compliance with regulatory requirements, conducting assessments, and coordinating audits. Ideal candidates should have a bachelor's degree and relevant experience in governance, risk management, or compliance.

Qualifications

• 3-5 years of experience in security governance, risk, and compliance or related field preferred.
• Must possess a strong working knowledge in operating systems and applications.
• Requires excellent analytical and communication skills.

Responsibilities

• Conduct regular access reviews on critical systems to ensure compliance.
• Maintain the GRC team’s security awareness program.
• Collaborate with internal and external auditors.

Skills

Analytical Skills

Risk Analysis

Communication Skills

Project Management

Technical Writing

Education

Bachelor’s degree in Computer Information Systems or related field

Tools

MS Office

Job description

Join to apply for the GRC Analyst II - Remote role at UNFI

Join to apply for the GRC Analyst II - Remote role at UNFI

Job Overview:

The GRC Analyst II is responsible for working across the organization with all levels of individuals as well as with external auditors to implement and execute on a comprehensive Security Governance and Compliance program. This role is responsible for coordinating and reporting on IT portions of internal and external audits, review findings and work with the impacted areas to develop, track, and complete remediation plans.

The GRC analyst will work with the GRC leaders to execute and maintain a robust IT compliance program that proactively manages audits and assessments and risks to the enterprise. These roles will also contribute to the Identity and Access Governance program, security policy and standard development, and cyber security awareness program.

Job Responsibilities:

Core Responsibilities

• Conducts regular access reviews on critical systems to ensure access is appropriate.
• Ensures overall compliance with regulatory requirements, including but not limited to PCI, SOX, HIPAA, etc.
• Conducts assessments to identify gaps and make sound recommendations for improvement. Identify acceptable levels of residual risk, and assist with action plans, policy, and procedural changes for risk mitigation.
• Conduct and monitor the enterprise security awareness program; ensure compliance across the organization.
• Determine threats, identify risks and vulnerabilities to the organization, maintains and updates control framework.
• Maintains the GRC team’s security awareness program to help create security awareness trainings, and track results through metrics.
• Assists with the build out of an enterprise GRC technology platform, development, and documentation of application functionality.
• Assist with the development of the Identity and Access Governance function and drive the execution and implementation of the program.
• Prepares documentation and reports requiring minimal revision by management.
• Meets with various management groups to facilitate efficient and effective compliance projects and services.
• With minimal supervision, holds discussions with management regarding control weaknesses and prepare reports to management communicating results including recommendations to improve technology and business practices.
• Identifies opportunities and provides solutions for improvement, such as automation, to compliance processes.
• Monitors progress and status of multiple concurrent assigned compliance projects to ensure completion within budgeted timeframes, reporting any timing issues to management in a timely manner.
• Collaborates with internal and external auditors.
  
  

Job Requirements:

Education/ Certifications:

• Bachelor’s degree in computer information systems, Information Technology, Accounting, and Finance or related field is preferred.
  
  

Experience:

• 3-5 years of experience in security governance, risk, and compliance, or related field preferred.
  
  

Knowledge/Skills/ Abilities

• Must possess a strong working knowledge in the following areas: operating systems, applications, operations (batch processing, monitoring) networking and telecommunications, databases, and logical security.
• In-Depth knowledge of internal control concepts, principles, risk analysis, Sarbanes-Oxley Compliance, PCI Compliance, HIPAA, Privacy, process improvement and techniques, including COSO and COBIT frameworks
• Requires excellent analytical and communications skills to learn customer business objectives, evaluate risks and plan, supervise and control compliance and other activities.
• Proficient in MS Office tools (Excel, Word, etc.)
• Must have excellent verbal, written and presentation skills, a high degree of personal integrity and ability to work under limited supervision. Supervisory skills, ability to work well with others in a team environment and ability to produce results through others is required.
• Must be capable of working under minimum supervision, planning, and conducting compliance assignments and directing the activities of staff as required.
• Good judgment is required for this position as there may be times when direct supervision may not be immediately available.
  
  

Work Environment:

Remote Role:

• This position is classified as remote where the associate will perform remote work from their primary residence. Remote associates are welcome to work from the office but are not required to do so. While remote associates are not required to work from an office on a regular basis, they may be required to come to the office or other UNFI locations for necessary business reasons or if directed to do so by their manager.
  
  

Travel (minor):

This position may require the associate to travel to company offices, distribution centers, or other locations for specific meetings or other business reasons.

The above statements are intended to describe the general nature of the work performed by the employees assigned to this job. All employees must comply with Company policy and applicable laws. The responsibilities, duties and skills required of personnel so classified may vary within each department and/or location.

All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity or expression, national origin, disability, or protected veteran status. UNFI is an Equal Opportunity employer committed to creating an inclusive and respectful environment for all. - M/F/Veteran/Disability. VEVRAA Federal Contractor.

Seniority level

• Seniority level

  Mid-Senior level

Employment type

• Employment type

  Full-time

Job function

• Job function

  Business Development and Sales

• Industries

  Food and Beverage Services

Referrals increase your chances of interviewing at UNFI by 2x

Get notified about new Analyst jobs in Providence, RI.

Business Analyst (Remote - Massachusetts)

Analyst, Logistics Data Analytics (Remote)

Massachusetts, United States 15 hours ago

Massachusetts, United States $80,000.00-$110,000.00 2 weeks ago

Hospital Billing Revenue Integrity Analyst

Project Manager, Lead Regulatory Analyst

AI Math Analyst - Part Time Work From Home

Rhode Island, United States $30.00-$50.00 1 week ago

Staff Business Systems Analyst (Remote / Flexible)

Application and Development Support, Sr Analyst

Sr Business Data Analyst - Part Time 25 hours per week

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.