Senior IT GRC & Risk Analyst

Vestis; Roswell (GA); On-site; USD 110,000 - 150,000; Full time

Job summary

Vestis seeks a Senior Analyst, IT Governance, Risk and Compliance (GRC) to support governance, risk management, compliance, and control programs. You will coordinate IT risk assessments, maintain governance processes, and develop risk reporting with Power BI for leadership and auditors.

The role partners with IT, Finance, Legal, and Operations to strengthen the company’s overall risk posture and ensure regulatory obligations such as SOX and PCI DSS are met.

Qualifications

• Bachelor’s degree in Information Technology, Finance, Business, or related discipline.
• 10+ years’ experience in IT governance, risk management, internal audit, security operations, or related disciplines.
• Experience supporting audits, compliance programs, or control assessments.
• Experience with GRC platforms and reporting tools.

Responsibilities

• Support IT GRC program administration and continuous improvement.
• Maintain enterprise IT risk register with owners, mitigations, due dates, and ratings.
• Facilitate IT risk assessments and control reviews across infrastructure, applications, data, cloud and vendor environments.
• Coordinate governance committee meetings, risk reviews, and action item tracking.
• Develop risk reporting and dashboards for executives and auditors.
• Assist with policy management, SOX, PCI DSS, privacy and security program activities.
• Collaborate with security, IT, and business teams to track and mitigate risks.
• Prepare materials for leadership, committees, and external auditors.

Skills

Stakeholder mgmt

Risk reporting

GRC tooling

Cloud platforms

Security/compliance

Excel/Power BI

SOX/PCI-DSS

Certifications

Education

Bachelor's degree in IT/Finance/Business

Tools

GRC platforms (ServiceNow GRC, Archer, AuditBoard)

Power BI

Job description

Vestis seeks a Senior Analyst, IT Governance, Risk and Compliance (GRC) to support governance, risk management, compliance, and control programs. You will coordinate IT risk assessments, maintain governance processes, and develop risk reporting with Power BI for leadership and auditors.

The role partners with IT, Finance, Legal, and Operations to strengthen the company’s overall risk posture and ensure regulatory obligations such as SOX and PCI DSS are met.