Enterprise Risk and Compliance Analyst

Best Buy•Richfield, MN

3d•Hybrid

About The Position

As an Enterprise Risk and Compliance Analyst, you’ll play a pivotal role in configuring and supporting our Governance, Risk, & Compliance (GRC) platform. You’ll balance technical platform management with business process analysis, stakeholder engagement, and customer service. This is a dynamic opportunity to develop your technical skills while building relationships across risk, compliance, and cybersecurity teams. Success in this role means being inquisitive, proactive, adaptable, and committed to making a positive impact on our internal customers and their programs. This role is hybrid, which means you will work some days at our corporate office in Richfield, Minnesota, and some days virtually from home or another non-Best Buy location. The specific work arrangements vary by role and team. The recruiter or hiring manager will provide more details during the hiring process

Requirements

1+ years of experience working in a risk, compliance, audit, business analysis, or a SaaS platform support role.
1+ years of experience creating clear, user‑friendly technical or process documentation.
Experience consulting with internal customers to analyze processes and recommend improvements.
Experience translating business requirements into technical solutions or system configurations.
Ability to independently research and analyze problems, and escalate or ask questions when appropriate.
Strong communication skills, including the ability to explain technical concepts to non‑technical stakeholders.
Demonstrated customer service and interpersonal skills in a professional setting.

Nice To Haves

Bachelor’s degree in Management Information Systems (MIS), Computer Science (CS), Software Engineering, Systems Engineering, or related field.
1–3 years of experience configuring or supporting a no‑code/low‑code SaaS application (e.g., building workflows, managing data models, or supporting API connections).
Understanding of basic system and data architecture concepts such as entity relationship diagrams, data flow diagrams, key fields, and cross‑system relationships.
Familiarity with project management methodologies (waterfall or agile) and associated tools.
Exposure to activities across the software development lifecycle (SDLC), including requirements, build, testing, and deployment.
General knowledge of GRC or risk management concepts, compliance frameworks, and cybersecurity fundamentals.
Experience with a programming language (e.g., Python or Java) and an understanding of JSON structures used in RESTful API integrations or automation scripts.

Responsibilities

Serve as a GRC program partner by building relationships with internal stakeholders, understanding how their processes and data interact, and helping drive systematic interconnectedness across risk and compliance functions.
Provide guidance on platform capabilities, constraints, and bestpractice design principles to ensure solutions are feasible and aligned with the underlying architecture of the platform.
Consult with internal risk and compliance partners to gather, document, and refine business and functional requirements, then translate them into workflow designs, system enhancements, or integration opportunities.
Collaborate with the GRC Product Owner to shape backlog items, present solution options, and support prioritization in an agile delivery model.
Configure, enhance, and support a nocode/lowcode GRC platform to mature program capabilities across multiple risk and compliance domains, ensuring configurations are scalable, maintainable, and aligned with platform standards.
Execute thorough configuration testing with attention to accuracy, edge cases, and user experience.
Participate in peer reviews and quality assurance activities, coordinate and support user acceptance testing (UAT), and help facilitate continuous improvement of platform delivery practices.
Maintain clear, concise technical and process documentation to support sustainable operations, knowledge sharing, and long term platform governance.