Senior IT Risk & Governance Analyst

Vestis Corporation; Roswell (GA); On-site; USD 120,000 - 160,000; Full time

Job summary

Vestis Corporation in Roswell, GA seeks a Senior Analyst, IT Risk & Governance to lead governance, risk, and compliance initiatives across IT, finance, and operations. You will manage risk assessments, policy updates, and third-party risk programs while coordinating with internal audit and leadership.

The role focuses on driving risk visibility through dashboards, strengthening controls, and aligning with regulatory requirements, including SOX and privacy regimes.

Qualifications

• Bachelor's degree in information technology, finance, business, or related discipline.
• 10+ years’ experience in IT governance, risk management, internal audit, security operations, or related disciplines.
• Experience supporting audits, compliance programs, or control assessments.
• Strong analytical and problem-solving skills.
• Experience with Microsoft Excel, Power BI, and reporting tools.
• Excellent written and verbal communication skills.
• Experience supporting SOX, PCI DSS, privacy, or security programs.
• Experience with GRC platforms such as ServiceNow GRC, Archer, AuditBoard, or similar tools.
• Familiarity with cloud platforms (Azure, AWS, or Google Cloud).
• Professional certifications such as: CRISC, CISA, CGRC, CDPSE, CISSP (Associate or progressing toward) desired.

Responsibilities

• Support administration and continuous improvement of the IT Governance, Risk, and Compliance (GRC) program.
• Maintain the enterprise IT risk register, including documentation of risk owners, mitigation plans, due dates, and risk ratings.
• Facilitate periodic IT risk assessments and control reviews across infrastructure, applications, data, cloud platforms, and vendor environments.
• Assist business and technology teams in identifying emerging risks and developing risk mitigation plans.
• Coordinate governance committee meetings, risk reviews, and action item tracking.
• Support policy management processes, including policy updates, exception tracking, and annual reviews.
• Support compliance activities related to SOX, PCI DSS, privacy requirements, cybersecurity frameworks, and other regulatory obligations.
• Assist in conducting technology vendor and third-party risk assessments.
• Coordinate collection and review of security documentation, including SOC reports, security questionnaires, and attestations.
• Monitor remediation activities associated with vendor risk findings.
• Maintain vendor risk inventories and reporting.
• Develop and maintain executive dashboards and reporting using Power BI and related tools.
• Coordinate with security operations’ vendor partner to gather analytics to assess trends associated with technology risks, vulnerabilities, audit findings, compliance activities, and remediation performance.
• Prepare materials for executive leadership, governance committees, and auditors.
• Produce recurring risk and compliance reports to support management decision-making.
• Partner with security operations vendor partner, infrastructure, application, and data teams to track risks identified through vulnerability management, incident response, and other security activities.
• Assist with governance related to AI, cloud services, data privacy, and emerging technologies.
• Support awareness initiatives that strengthen the organization\'s culture of governance and risk management.

Job description

Vestis Corporation in Roswell, GA seeks a Senior Analyst, IT Risk & Governance to lead governance, risk, and compliance initiatives across IT, finance, and operations. You will manage risk assessments, policy updates, and third-party risk programs while coordinating with internal audit and leadership.

The role focuses on driving risk visibility through dashboards, strengthening controls, and aligning with regulatory requirements, including SOX and privacy regimes.