Hybrid GRC Analyst: Security Risk & Compliance

Sentry Insurance Agency; Stevens Point (WI); Hybrid; USD 90,000 - 120,000; Full time

Benefits offered by this job

Hybrid work model

Tuition reimbursement

Health, dental, and vision insurance

Wellness resources

401(k) with company match

Job summary

Sentry Insurance Agency seeks a GRC Analyst to design, implement, and govern the information security governance framework. You will test controls, assess risk, and maintain policies while reporting findings to stakeholders in a hybrid Stevens Point, WI office.

You will collaborate on governance, risk appetite, and regulatory alignment, supporting audit coordination and continuous improvement of security programs.

Qualifications

• Bachelor’s degree or equivalent work experience.
• Minimum 2 years of related work experience in information security, internal audit, security risk management or related field.
• Security certification (e.g., CISA, CRISC, CISSP, PCI ISA, Security+) preferred.
• Demonstrated experience in information security policy development, management, or framework design.
• Experience with control design, control effectiveness testing methodologies, or audit coordination.
• Strong analytical skills with an ability to define and track metrics (KPIs/KRIs).
• Proven ability to facilitate cross-functional processes and drive documentation.

Responsibilities

• Design, implement, and maintain the IS governance framework, ensuring alignment with corporate governance and regulatory requirements.
• Establish and oversee IT and IS control objectives and approve design and methodology used for control effectiveness testing.
• Create, update, and manage the review lifecycle of security policies, standards, and procedures to ensure compliance with governance frameworks.
• Validate the design and integrity of the control effectiveness testing program, identifying testing gaps and monitoring remediation efforts.
• Define, monitor, and report KPIs and KRIs related to control effectiveness, risk mitigations, and governance maturity.
• Coordinate internal and external audit alignment for governance-related areas.
• Contribute to the definition and communication of Sentry’s information security risk appetite with executive leadership.
• Review and understand fundamental regulations and frameworks related to cybersecurity.
• Additionally, review governance methodologies and drive improvements to mature the IS governance program.
• Collaborate on security initiatives and deliver strategic governance recommendations to management.

Education

Bachelor’s degree or equivalent work experience

Security certification (CISA, CRISC, CISSP, PCI ISA, Security+) preferred

Job description

Sentry Insurance Agency seeks a GRC Analyst to design, implement, and govern the information security governance framework. You will test controls, assess risk, and maintain policies while reporting findings to stakeholders in a hybrid Stevens Point, WI office.

You will collaborate on governance, risk appetite, and regulatory alignment, supporting audit coordination and continuous improvement of security programs.