Information Security Risk & Compliance Specialist

Performance Food Group; Richmond (VA); On-site; USD 70,000 - 100,000; Full time

Benefits offered by this job

Day 1 health benefits

Employee stock purchase plan

401K employer matching

Education assistance

Paid time off

Job summary

Performance Food Group is seeking an Information Security Analyst to support information and privacy risk management within the Information Security Department. The role focuses on identifying, quantifying, communicating, and tracking risks to information assets and ensuring compliance with internal/external policies.

Reporting to the Manager of Information Security Risk Management, you will collaborate with IT and business stakeholders on IT risk management, third-party risk, and evolving AI

Qualifications

• Bachelor's degree required.
• 1-3 years of information security/risk experience.
• Ability to communicate security concepts to diverse audiences.
• Experience evaluating AI initiatives through a security risk lens.
• Knowledge of regulatory requirements and frameworks (SOX, CobIT, PCI DSS, GDPR, CCPA).

Responsibilities

• Conduct risk assessments and maintain risk register.
• Assess IT controls, identify gaps, and optimize design for cost-effective compliance.
• Maintain risk management governance across IT and LOB stakeholders.
• Support development of evaluative risk frameworks for new technologies (AI).
• Maintain Business Impact Analysis and classify risk for applications/infrastructure.
• Support third-party risk management and contract security requirements.

Skills

Risk management

Regulatory knowledge

IT security risk assessments

AI risk evaluation

Stakeholder communication

Education

Bachelor's Degree

Tools

Azure Information Protection

Job description

Performance Food Group is seeking an Information Security Analyst to support information and privacy risk management within the Information Security Department. The role focuses on identifying, quantifying, communicating, and tracking risks to information assets and ensuring compliance with internal/external policies.

Reporting to the Manager of Information Security Risk Management, you will collaborate with IT and business stakeholders on IT risk management, third-party risk, and evolving AI