Staff Risk & Compliance Analyst

GE Vernova; United States; On-site; USD 85,000 - 120,000; Full time

Benefits offered by this job

Relocation assistance

Job summary

GE Vernova is seeking a Staff Risk Analyst to oversee the Cybersecurity and Risk function across GE sites. You will support governance, SOX compliance, and end-to-end deficiency management while collaborating with process owners to strengthen the control environment.

The role emphasizes risk assessment, policy updates, and dashboard-driven reporting to leadership. A strong analytical mindset and cross-functional collaboration are essential in a fast-paced IT governance setting.

Qualifications

• Bachelor''s degree in Computer Engineering, Computer Science, Information Systems, or a related field (or equivalent experience).
• 1-3 years in IT GRC, IT Audit, or related fields with foundational knowledge of SOX ITGCs and application controls; ERP exposure beneficial.
• Familiarity with ERP systems (SAP, Oracle) and interest in learning SoD concepts, access controls, and configuration standards.
• Willingness to learn GRC/security tooling and participate in process improvement and metrics-driven approaches.

Responsibilities

• Support governance framework, update documentation, track process adherence, and standardize practices under senior guidance.
• Assist in SOX compliance management by coordinating testing, managing documentation, and ensuring timely control assessments.
• Lead deficiency identification, tracking, and remediation across GRC domains with regular status reporting.
• Assist in risk assessment activities and maintain risk registers; document IT system risks including cybersecurity threats and data breaches.
• Support audits by gathering evidence, managing requests, documenting findings, and tracking remediation progress.
• Monitor regulatory changes (SOX, NIS2, GDPR) and help map controls and policies accordingly.
• Develop training materials and coordinate training sessions on compliance obligations and best practices.
• Build and maintain IT risk posture and control dashboards for senior management.

Skills

Learning mindset

Analytical skills

Communication

Collaboration

Problem solving

Attention to detail

Documentation

Education

Bachelor's degree in Computer Engineering, Computer Science, Information Systems, or related field

Tools

Power BI

Tableau

SailPoint

Saviynt

Job description

Job Description Summary

The Staff Risk Analyst will oversee the Cybersecurity and Risk function across different GE business sites, presence and interests.

Job Description Roles and Responsibilities

In this role, you will: Support governance framework : Assist in maintaining the IT governance structure using established frameworks; help update documentation, track process adherence, and support standardization efforts under senior guidance. SOX Compliance Management: Support the Power DT Sarbanes-Oxley compliance program by coordinating testing activities, managing documentation requirements, and ensuring timely completion of control assessments. Collaborate with process owners to maintain accurate control narratives, risk-control matrices, and test evidence in accordance with SOX requirements. Track testing cycles, identify control gaps or weaknesses, and facilitate management s remediation efforts. Prepare SOX status reports for leadership and external auditors, maintain the SOX controls repository, and stay current on regulatory changes and industry best practices to ensure continuous compliance with financial reporting requirements. End-to-End Deficiency Management : Lead comprehensive deficiency identification, tracking, and resolution processes across all GRC domains. Collaborate with control owners and business stakeholders to document findings, assign remediation actions with clear deadlines, and monitor progress through to closure. Maintain deficiency registers, provide regular status reporting to leadership, perform root cause analysis, and ensure timely escalation of overdue or high-risk items. Drive continuous improvement by analyzing deficiency trends and recommending preventive measures to strengthen the organization s control environment. Support key control domains : Assist in ERP control areas (Identity and Access Management/Privileged Access, SDLC/DevOps change, and IT operations) by performing routine control testing, maintaining evidence files, and supporting standardization initiatives. Support policy development : Assist in drafting and updating IT policies and procedures for security, data management, and access control; help coordinate review processes, track acknowledgments, and maintain policy repositories to support continuous compliance. Support risk management : Assist in risk assessment activities by gathering data, documenting findings, and maintaining risk registers; help identify and document risks associated with IT systems, including cybersecurity threats and data breaches, under senior supervision. Support compliance audits : Serve as a key support resource for internal and external audits; assist in managing request lists, gathering evidence, organizing documentation, responding to routine inquiries, and tracking remediation progress for identified control deficiencies. Monitor regulatory adherence : Help monitor changes in regulations and laws, such as SOX, NIS2, and GDPR; assist in maintaining control and policy mappings and support updates to ensure ongoing compliance. Support training and awareness : Assist in developing training materials and coordinating training sessions for employees and stakeholders; help track participation and gather feedback to support understanding of compliance obligations and best practices. Support reporting : Assist in building and maintaining reports and dashboards for senior management on IT risk posture, compliance status and control effectiveness; help gather data, validate information and prepare routine status updates.

What you'll bring (Basic Qualifications)

Experience : Bachelor s degree in Computer Engineering, Computer Science, Information Systems, or a related field (or equivalent experience). 1-3 years in IT GRC, IT Audit, or related fields with foundational knowledge of SOX ITGCs and application controls; any ERP exposure is beneficial. ERP awareness : Basic understanding of ERP systems (SAP, Oracle) and interest in learning Segregation of Duties (SoD) concepts, access controls, and configuration standards. Learning mindset : Demonstrated ability to learn quickly and adapt in a fast-paced environment; eagerness to understand business objectives and how control activities support organizational goals. Continuous improvement : Strong curiosity, first-principles problem solving, and interest in process improvement and metrics-driven approaches. Analytical skills : Good problem-solving and analytical skills to support control gap identification, risk assessment activities, and basic root-cause analysis under guidance. Communication : Strong written and verbal communication skills; ability to document findings clearly and communicate effectively with both technical and non-technical stakeholders. Collaboration : Demonstrated ability to work effectively in team environments, support cross-functional initiatives across IT, Finance, and business partners, and learn from senior team members. Technology aptitude : Basic familiarity with GRC concepts and willingness to learn GRC/security tooling and dashboards; interest in contributing to process improvements and automation initiatives. Professional development : Interest in pursuing relevant certifications such as CISA, CISM, or CRISC; openness to learning about COBIT frameworks and SOX requirements. Audit support : Willingness to learn audit processes and evidence management; ability to organize documentation, respond to routine requests, and support audit coordination activities. Data and reporting : Basic proficiency with data analysis tools and interest in learning dashboard development; familiarity with Excel and willingness to learn tools such as Power BI or Tableau.

What will make you stand out

Certifications : Interest in pursuing CISA certification within 1-2 years; basic understanding of SOX requirements; foundational knowledge of CISM, CRISC, or COBIT frameworks beneficial; willingness to learn about ISO 27001 standards. ERP risk foundation : Basic understanding of ERP systems (Oracle EBS, preferred); willingness to develop knowledge of critical access controls, configuration standards, and automated control testing; exposure to Identity Governance and Administration (IGA) platforms (e.g., SailPoint, Saviynt) a plus. Audit/exam support : Demonstrated organizational skills and attention to detail for supporting audit processes; ability to assist with evidence gathering, maintain PBC (Provided by Client) lists, and support routine audit inquiries; eagerness to learn internal and external audit processes (SOX) and contribute to smooth audit execution. Data analysis and reporting : Basic proficiency with data analysis and visualization tools; familiarity with Excel and willingness to learn advanced reporting tools such as Power BI or Tableau; ability to support control analytics and assist in developing KPI/KRI reports under guidance; strong attention to detail in data validation and documentation.

Additional Information

Relocation Assistance Provided: Yes