Governance Analyst (GRC)

Jobs Description

Title: Governance Analyst (GRC) Consultant Work Location: Philadelphia, PA 19122 Hybrid: 3 days onsite and 2 days remote Contract: 1+ years Interview Process: In-person initial interviews are preferred. Requests to participate in initial interviews via Microsoft Teams will be considered. We are seeking an experienced Governance Analyst (GRC) Consultant to supports Client's Works’ Information Technology governance, risk, and compliance activities. The Consultant will help evaluate technology risks, maintain governance frameworks and controls, support vendor audit activities, and strengthen policies and processes that guide the organization’s technology environment. The role requires hands-on experience in an Information Technology governance environment, strong analytical and communication skills, and the ability to translate risk and compliance findings into clear actions, reports, and presentations for management and leadership.

Responsibilities

• Conduct IT governance and risk assessments and document identified risks, control gaps, recommended actions, and strategic next steps.
• Support Governance, Risk, and Compliance activities across the Information Technology environment.
• Maintain, update, and develop governance frameworks, controls, policies, standards, and supporting documentation.
• Use governance and data governance tools to support risk, compliance, policy, control, and data governance activities.
• Support Data and AI Security governance using tools such as Varonis and Microsoft Purview.
• Participate in vendor audits and document findings, risks, remediation requirements, and follow-up actions.
• Collaborate with technology and business stakeholders to gather information, communicate governance requirements, and support knowledge transfer.
• Develop clear, concise reports, dashboards, and presentations for management and leadership.
• Track governance and compliance activities and support ongoing improvements to IT governance processes.
• Provide analysis and recommendations that help management make informed risk and governance decisions.

Qualifications

• Bachelor’s degree in Information Technology, Management Information Systems, IT Audit, or another related field of study.
• 4+ years of hands-on experience in an Information Technology governance environment, with demonstrated experience in Governance, Risk, and Compliance (GRC).
• Experience conducting technology risk assessments, evaluating governance and compliance requirements, and recommending actionable next steps.
• Experience maintaining, updating, and continuously improving IT governance frameworks, controls, standards, and policies.
• Experience conducting vendor audits and governance reviews, including documenting findings, risks, remediation actions, and follow-up activities.
• Experience with Data and AI Security tools such as Varonis, Microsoft Purview, or similar platforms.
• Experience with data governance tools such as Databricks, Alation, Collibra, or similar platforms.
• Experience preparing clear and concise governance, risk, and compliance reports and presentations for management and leadership.
• Experience demonstrating strong oral and written communication skills, including the ability to support effective knowledge transfer.
• Preferred Qualifications:
• Master’s degree in Information Technology, Management Information Systems, IT Audit, or a related field.
• Industry certification such as CRISC or CISA.
• Experience with OneTrust.
• Experience with Tableau or other business intelligence/reporting tools.