Governance, Risk & Compliance Analyst I

Duquesne Light Company•Pittsburgh, PA

2d•Hybrid

About The Position

The Governance, Risk & Compliance (GRC) Analyst I plays a key role in supporting and advancing the organization's information security, risk management, and regulatory compliance programs. This position is responsible for developing, maintaining, and enhancing IT governance processes, security controls, and compliance frameworks to ensure adherence to internal policies, industry standards, and regulatory requirements. The analyst collaborates with technology, business, risk, and compliance stakeholders to assess and mitigate risk, drive remediation activities, support audits, and promote a strong culture of security and compliance. The GRC Analyst I monitors and reports on key security and compliance metrics, manages compliance deliverables such as risk assessments, documentation reviews, and ensures timely resolution of audit and review findings. The role also supports third-party risk management activities, provides risk-based guidance and consultation to business partners, and assists in the development of compliance strategies and process improvements. Additionally, the analyst serves as a trusted resource for operational teams by delivering training, guidance, and support to help ensure consistent execution of governance, risk, and compliance practices across the organization.

Requirements

Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or related discipline required.
2+ years of relevant experience required
Excellent verbal and written communication skills
Ability to work collaboratively within various levels of the Company and across all disciplines
Ability to coordinate and prioritize multiple tasks
Strong organizational skills
Strong attention to detail

Responsibilities

Develop, enhance and maintain information systems, platforms and IT operating compliance procedures and processes.
Ensure timely completion of various Information Security compliance deliverables including: risk assessment, remediation, and compliance efforts including documentation reviews
Monitor metrics that measure the IT and Information Security Framework
Track and ensure adequate and timely resolutions to all audit/review issues relating to security.
Assist with execution and tracking of the 3rd party vendor risk assessment program.
Utilize analytical skills to assist in developing future strategies to resolve compliance issues.
Prepare for and support compliance audits conducted by internal resources, consultants or regulatory organizations.
Provide Information Security risk advisory and consultative services to internal customers, including IT, business, and risk and compliance stakeholders.
Provide guidance to other operational staff, including training to new project managers and other employees in completion of compliance practices and procedures.
Perform other job-related duties as assigned
Storm role duties as assigned
Utilize data to make business decisions as appropriate for the position, support data stewardship activities and partner with IT on underlying data needs.