Hybrid GRC Analyst: Security Risk & Compliance

sentryinsurance; United States; Hybrid; USD 65,000 - 110,000; Full time

Benefits offered by this job

Hybrid work model

Meal stipend

Tuition reimbursement

Medical, dental, vision

Parental leave

Volunteer time off

Job summary

Sentry is seeking a Governance, Risk & Compliance Analyst in Stevens Point, WI, blending risk assessment, control testing, and policy governance to strengthen our security posture. You will test security controls, assess supplier and process compliance, report findings to information security management and business stakeholders, and drive remediation to ensure sustainable risk reduction.

This hybrid role collaborates with legal and IT, supports governance of information security policies, and

Qualifications

• Bachelor's degree or equivalent work experience.
• Minimum 2 years of related information security or risk management experience.
• Security certification (CISA, CRISC, CISSP, PCI ISA, Security+) preferred.
• Experience conducting information security risk assessments and maintaining risk registers.
• Understanding of third-party risk management principles.
• Experience with risk treatment planning and monitoring.
• Proven ability to lead meetings for senior management (ISRC) is preferred.

Responsibilities

• Conduct security risk assessments and evaluate control effectiveness.
• Test security controls using GRC platforms and analysis tools.
• Support contracts to protect security and privacy.
• Report audit results, risk findings, and remediation actions to stakeholders.
• Study emerging security trends and participate in governance of policies.
• Coordinate review and approval of security exception requests.
• Assist with IS Risk platform administration.

Skills

Security risk assessments

GRC platforms

Contract negotiation

Stakeholder reporting

Education

Bachelor's degree or equivalent

Job description

Sentry is seeking a Governance, Risk & Compliance Analyst in Stevens Point, WI, blending risk assessment, control testing, and policy governance to strengthen our security posture. You will test security controls, assess supplier and process compliance, report findings to information security management and business stakeholders, and drive remediation to ensure sustainable risk reduction.

This hybrid role collaborates with legal and IT, supports governance of information security policies, and