Hybrid GRC Analyst — Risk, Compliance & Controls

Sentry Insurance; Stevens Point (WI); Hybrid; USD 70,000 - 100,000; Full time

Benefits offered by this job

Hybrid flexibility

Dining stipend

Tuition reimbursement

Benefits package

Paid time off

401(k) company match

Sentry Foundation

Job summary

Sentry Insurance is seeking a Governance, Risk & Compliance Analyst to test security controls, assess risk and compliance, and maintain information security policies. The role will be located in Stevens Point, WI, in a hybrid work model, with responsibilities spanning risk assessments, controls testing, and governance across security programs.

The ideal candidate will have a bachelor's degree or equivalent experience, 2+ years in information security, and preferred security certifications.

Qualifications

• Bachelor's degree or equivalent work experience.
• Minimum 2 years of related information security experience.
• Security certification (CISA, CRISC, CISSP, PCI ISA, Security+) preferred.
• Experience with information security risk assessments and risk registers.
• Understanding of third-party risk management principles.
• Experience with risk treatment planning and monitoring.
• Ability to manage meetings for senior management.

Responsibilities

• Conduct security risk assessments to identify concerns and ensure compliance with security documents.
• Perform security testing using GRC platforms to evaluate controls.
• Support contracts negotiations to protect security and privacy.
• Provide documentation and track remediation of identified gaps and audit results.
• Review evolving regulations and participate in governance of security policies and standards.
• Coordinate review/approval of security exception requests.
• Review fundamental regulations and frameworks related to cybersecurity.
• Assist with IS Risk platform administration.
• Perform other job-related duties as assigned.

Skills

Security risk management

Security testing

Policy governance

Contract negotiation

Regulatory knowledge

Senior management coordination

Education

Bachelor's degree or equivalent work experience

Security certification (CISA, CRISC, CISSP, PCI ISA, Security+)

Tools

GRC platforms

Risk analysis tools

Job description

Sentry Insurance is seeking a Governance, Risk & Compliance Analyst to test security controls, assess risk and compliance, and maintain information security policies. The role will be located in Stevens Point, WI, in a hybrid work model, with responsibilities spanning risk assessments, controls testing, and governance across security programs.

The ideal candidate will have a bachelor's degree or equivalent experience, 2+ years in information security, and preferred security certifications.