IT Governance, Risk, and Compliance Analyst

Pete and Gerry's

$80K — $95K *
US-Anywhere
+ 5 other locationsRemote
Information Technology
Less than 5 years of experience
Job Overview by Ladders

Qualifications

  • Bachelor's degree in Information Systems, Accounting, Business Administration, Cybersecurity, or related field.
  • 2-5 years of experience in IT Audit, IT Compliance, IT Risk Management, SOX Compliance, or Governance, Risk & Compliance.
  • Working knowledge of SOX Section 404 and IT General Controls framework (ITGCs).
  • Experience with control testing and audit evidence.
  • Strong documentation and analytical skills.
  • Excellent written and verbal communication skills with both technical and non-technical stakeholders.

Responsibilities

  • Assist in the design, implementation, and maturation of the company's SOX compliance program.
  • Support the identification and documentation of IT General Controls (ITGCs), automated controls, interfaces, and key reports.
  • Participate in risk assessments and control evaluations across business applications, infrastructure, and cloud environments.
  • Coordinate and execute periodic user access reviews for critical business applications and infrastructure platforms.
  • Serve as a primary point of coordination for all IT audit requests.
  • Track audit requests, open findings, remediation activities, and status updates.
  • Support remediation efforts for control deficiencies, gaps, and audit findings.

Benefits

  • Medical, dental, and vision insurance through Anthem Blue Cross Blue Shield and Humana.
  • Paid vacation and sick time.
  • 401(k) with 4% employer match.
  • Opportunities for advancement and tuition reimbursement.
  • Onsite employees receive free eggs weekly; remote employees receive coupons for free eggs.
Full Job Description
Job Type

Full-time

Description

The Role at a Glance:

The IT Governance, Risk, and Compliance (IT GRC) Compliance Analyst is responsible for supporting the development, implementation, and ongoing management of the organization's IT compliance and SOX control program. This role is a blend of both strategic and tactical work. This role works closely with IT, Finance, Audit and business stakeholders to ensure that IT General Controls (ITGCs), application controls, and compliance processes are operating effectively and supporting the organization's regulatory requirements.

The IT GRC Compliance Analyst serves as a key contributor in building a sustainable compliance framework, coordinating audit activities, performing user access reviews, gathering and maintaining evidence, and driving continuous improvement of the company's overall compliance posture.

How You'll Create Greater Impact:

In this role, you'll help deliver the highest quality product while upholding our unwavering commitment to animal welfare, food safety, and responsible farming. You'll act boldly, embrace continuous improvement, and partner with teammates and customers to deliver wins.
  • Assist in the design, implementation, and maturation of the company's SOX compliance program.
  • Support the identification and documentation of IT General Controls (ITGCs), automated controls, interfaces, and key reports.
  • Partner with business and IT teams to develop and maintain control narratives, process documentation, and risk assessments.
  • Monitor regulatory and compliance requirements and recommend improvements to compliance processes.
  • Participate in risk assessments and control evaluations across business applications, infrastructure, and cloud environments.
  • Support management's recurring SOX certification activities.
  • Coordinate and execute periodic user access reviews for critical business applications and infrastructure platforms.
  • Validate user provisioning, modifications, and deprovisioning activities to ensure compliance with established policies.
  • Review segregation of duties (SoD) conflicts and work with application owners to remediate identified issues.
  • Maintain evidence supporting access management controls and review results.
  • Assist with implementation and monitoring of Identity and Access Management (IAM) controls and governance processes.
  • Serve as a primary point of coordination for all IT audit requests.
  • Collect, validate, organize, and retain all required audit evidence.
  • Ensure evidence is complete, accurate, and reflects control execution requirements.
  • Track audit requests, open findings, remediation activities, and status updates.
  • Support walkthroughs, testing activities, and auditor inquiries.
  • Maintain audit-ready documentation and repositories throughout the year.
  • Assist in maintaining IT risk and control matrices (RCMs).
  • Perform control monitoring activities and identify opportunities for process improvements.
  • Support remediation efforts for control deficiencies, gaps, and audit findings.
  • Help establish key compliance metrics and reporting mechanisms.
  • Partner with IT teams to evaluate control impacts associated with system implementations, upgrades, and significant changes.
  • Support the development and execution of enterprise-wide compliance strategy initiatives.
  • Promote compliance awareness and best practices across IT and business functions.
  • Assist in developing policies, standards, procedures, and training materials.
  • Contribute to compliance automation and continuous monitoring initiatives.
  • Recommend improvements that enhance control effectiveness, operational efficiency, and audit readiness.

What You'll Bring to the Flock:

We are one team - united by respect and a shared commitment to doing what's right. What we do every day connects to something bigger.You'll bring your experience, perspective, and pride in your work. We value collaboration, curiosity, and diverse viewpoints - because they make our flock stronger.
  • Bachelor's degree in Information Systems, Accounting, Business Administration, Cybersecurity or related field.
  • 2-5 years of experience in IT Audit, IT Compliance, IT Risk Management, SOX Compliance, or Governance, Risk & Compliance.
  • Working knowledge of SOX Section 404 and IT General Controls framework (ITGCs).
  • Experience with control testing and audit evidence.
  • Strong documentation and analytical skills.
  • Experience performing user access reviews and access governance activities.
  • Understanding of access management, change management, system development lifecycle, and computer operations controls.
  • Strong organizational skills with the ability to manage multiple audit and compliance activities simultaneously.
  • Excellent written and verbal communication skills with both technical and non-technical stakeholders.
  • Advanced proficiency in Microsoft Excel, Word, and PowerPoint.
  • Experience within a Consumer Packaged Goods (CPG), Manufacturing, Distribution, or Retail organization.
  • Experience with ERP platforms such as Microsoft Dynamics Business Central, SAP, Oracle, or similar systems.
  • Familiarity with FastPath\Delinea and FloQast SoD and compliance platforms.
  • Experience supporting cloud environments including Microsoft Azure and Microsoft 365.
  • Professional certifications such as:

o CISA (Certified Information Systems Auditor)

o CRISC (Certified in Risk and Information Systems Control)

o CIA (Certified Internal Auditor)

o CISSP (Certified Information Systems Security Professional

Work Schedule & Hours:
  • Day Shift: Monday through Friday
  • Shifts are typically 8 hours per day, depending on operational needs.
  • Start and end times may vary
  • Flexibility is required, as schedules may be adjusted to support business operations.

Tending to our Flock:

We care for our people the same way we care for our hens - with attention, respect, and balance. Our benefits are designed to support real life and whole wellbeing.
  • Medical, dental, and vision insurance through Anthem Blue Cross Blue Shield and Humana
  • Paid vacation
  • Paid sick time
  • Paid volunteer time
  • 9 paid holidays
  • 401(k) with 4% employer match
  • Disability and life insurance
  • Opportunities for advancement
  • Maternity and paternity leave
  • Tuition reimbursement
  • Flexible Spending Account
  • Footwear reimbursement for onsite employees
  • Onsite employees receive free eggs weekly; remote employees receive coupons for free eggs
  • Breakfast or lunch events from time to time.
  • A team grounded in a shared mission: Healthy Hens, Healthy Eggs, Healthy Planet.

Similar Jobs

More Jobs at Pete and Gerry's

More Information Technology Jobs

Find similar IT Governance, Risk, and Compliance Analyst jobs: