Governance, Risk, and Compliance Analyst - Unilever Prestige

Dermalogica • Carson, CA

10d • Remote

About The Position

Governance, Risk and Compliance Analyst - Unilever Prestige Location: USA (Remote) Unilever Prestige is the Luxury Beauty division of Unilever that holds eight companies/brands: Dermalogica, Murad, Living Proof, Hourglass, Tatcha, Paulas Choice, K18 and Garancia. The businesses have a global footprint, are omni-channel in nature and with a heavy index to e-commerce and direct to consumer offerings. Our brands blend luxury physical in-store experiences with digitalized e-commerce offerings including digital technologies embedded within product offerings. It operates a unique organizational model that places high emphasis on independence, entrepreneurship, and speed, all rooted in individual breadth and depth of capability. The division is one of Unilevers key strategic bets and has seen consistent double-digit growth through both organic and M&A growth. Purpose: Reporting to the Senior Director of Information Security, the GRC Analyst will play a critical role in supporting the organizations compliance and risk management programs. This position is responsible for assessing third-party risks, maintaining the enterprise risk register, collecting audit evidence, and promoting adherence to compliance standards.

Requirements

• Strong communication skills for cross-functional collaboration.
• Excellent communication skills for cross-functional collaboration.
• Familiarity with regulatory frameworks such as PCI DSS, SOX, and privacy regulations (GDPR, CCPA).
• 2+ years of experience in compliance, risk management, or audit support.

Responsibilities

• Third-Party Risk Assessments Conduct risk assessments for vendors, partners, and other third parties.
• Evaluate security, privacy, and compliance controls against organizational standards.
• Risk Register Management Maintain and update the organizational risk register.
• Track mitigation plans and monitor risk status across business units.
• Audit Support Collect and organize evidence for audits (including PCI and SOX).
• Collaborate with stakeholders to ensure timely and accurate documentation.
• Privacy Compliance Support Apply fundamental knowledge of U.S. or EU privacy laws (e.g., CCPA, GDPR).
• Assist in privacy impact assessments and data protection reviews as needed.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level
• Education Level: No Education Listed