GRC & Compliance Analyst — Risk & Audit

WSFS Bank; Wilmington (DE); On-site; USD 64,000 - 106,000; Full time

Benefits offered by this job

Medical, dental, and vision

401(k) plan

Life, accident and disability

FSAs and HSAs

Wellness program

Incentives & bonuses

Parental leave

Military leave

Paid time off

Sick leave

Paid holidays

Job summary

WSFS Bank is seeking a Governance, Risk, and Compliance Analyst to support risk management, compliance, and governance. The role includes audits, risk assessments, tracking action items, and monitoring third-party security risks across the organization.

The successful candidate will work with regulated frameworks (FFIEC, GLBA, SOX) and collaborate with multiple stakeholders to strengthen controls and reporting.

Qualifications

• Bachelor's degree in risk, business, information security, or related field.
• Experience with risk assessments, control testing, or GRC platforms.
• Familiarity with banking regulations and cybersecurity frameworks.
• Excellent written and verbal communication with stakeholders.

Responsibilities

• Monitor and maintain the GRC framework in line with regulatory standards.
• Conduct risk assessments for business units, IT systems, and vendors.
• Support audits and remediation tracking with timely evidence.
• Maintain risk registers, control matrices, and documentation.
• Assist policy development to support enterprise risk management.
• Track risk metrics, incidents, and control gaps.
• Perform ongoing monitoring and testing of internal controls.
• Assist with regulatory filings and compliance reporting.
• Collaborate with business units to address risks and improve controls.

Skills

Risk assessment

Verbal and written comms

Auditing

Education

Bachelor's degree in Risk Management, Business, Information Security, or related field

Tools

Archer

LogicGate

ServiceNow GRC

Job description

WSFS Bank is seeking a Governance, Risk, and Compliance Analyst to support risk management, compliance, and governance. The role includes audits, risk assessments, tracking action items, and monitoring third-party security risks across the organization.

The successful candidate will work with regulated frameworks (FFIEC, GLBA, SOX) and collaborate with multiple stakeholders to strengthen controls and reporting.