Information Security Risk & Compliance Analyst

Core-Mark; Richmond (VA); On-site; USD 85,000 - 120,000; Full time

Job summary

Performance Food Group in Richmond, VA is seeking an Information Security Analyst to support information and privacy risk management. You will work with IT and business stakeholders to assess risks, ensure regulatory compliance, and improve security controls across the organization.

Responsibilities include maintaining risk registers, evaluating AI initiatives for security risk, and supporting governance forums up to the Board. Strong communication and collaboration skills are essential.

Qualifications

• Bachelor's degree in a related field.
• Experience in IT risk management and regulatory compliance.
• Experience evaluating AI initiatives through a security risk lens.
• Knowledge of Sarbanes-Oxley, PCI DSS, HIPAA, GDPR, CCPA.
• Experience developing security policies and conducting maturity assessments.
• Ability to influence across IT and business stakeholders.

Responsibilities

• Conduct risk assessments and maintain risk register.
• Assist in IT risk management governance and third party risk.
• Develop evaluative risk frameworks for new technologies including AI.
• Maintain Business Impact Analysis and risk categorizations.
• Support governance forums and reporting to Board levels.
• Identify non-compliance with regulatory mandates.

Skills

IT risk management

Regulatory compliance

Security policy development

AI risk assessment

Third party risk management

Risk communication

Data privacy awareness

Strong communication

Project coordination

Education

Bachelor's Degree

Tools

Microsoft Azure Information Protection

Job description

Performance Food Group in Richmond, VA is seeking an Information Security Analyst to support information and privacy risk management. You will work with IT and business stakeholders to assess risks, ensure regulatory compliance, and improve security controls across the organization.

Responsibilities include maintaining risk registers, evaluating AI initiatives for security risk, and supporting governance forums up to the Board. Strong communication and collaboration skills are essential.