Governance, Risk & Compliance Analyst

Sentry Insurance Agency • Stevens Point, WI

1d • Hybrid

About The Position

As a GRC Analyst, you’ll test security controls, assess risk and compliance, report findings to stakeholders, and maintain information security policies and standards. You'll participate in information security risk management by testing the effectiveness of security controls, assessing security controls and compliance for suppliers, systems, and processes against threats and industry best practices to confirm adherence to security and compliance requirements. You'll report findings and recommendations to information security management and business stakeholders to ensure any concerns are resolved. You'll also review and maintain ongoing governance of the organization's information security policies and standards.

This position will be located at our Office in Stevens Point, WI in a hybrid work model and is not a fully remote opportunity.

Sentry does not offer employment in this position to holders of F-1, J-1, and H-1 Visas for the purpose of obtaining practical experience.

Requirements

• Bachelor’s degree or equivalent work experience
• Minimum 2 years of related work experience in information security, internal audit, security risk management or related field
• Demonstrated experience in information security policy development, management, or framework design.
• Experience with control design, control effectiveness testing methodologies, or audit coordination.
• Strong analytical skills with an ability to define and track metrics (KPIs/KRIs).
• Proven ability to facilitate cross-functional processes and drive documentation.

Nice To Haves

• Successfully completed or able to work towards a security certification (e.g., CISA, CRISC, CISSP, PCI ISA, Security+, etc.) preferred.

Responsibilities

• Design, implement, and maintain the IS governance framework, ensuring alignment with corporate governance and regulatory requirements.
• Establish and oversee IT and IS control objectives and approve the design and methodology used for control effectiveness testing.
• Create, update, and manage the review lifecycle of security policies, standards, and procedures to ensure compliance with governance frameworks.
• Validate the design and integrity of the control effectiveness testing program, ensuring methodologies are sound, identifying testing gaps, and monitoring remediation efforts.
• Define, monitor, and report Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs) related to overall control effectiveness, risk mitigations, and governance maturity.
• Validate the end-to-end process for reviewing and approving security exception requests, ensuring proper documentation and process adherence.
• Define the strategic direction and selection criteria for GRC platforms, and lead research into GRC tooling optimization.
• Coordinate internal and external audit alignment for governance-related areas (e.g., framework design, governance metrics creation and reporting, control objective definition).
• Contribute to the definition and communication of Sentry’s information security risk appetite, collaborating with executive leadership.
• Review and understand fundamental regulations and frameworks related to cybersecurity.
• Periodically review and enhance governance methodologies and drive improvements to mature the IS governance program.
• Collaborate on the research and development of security initiatives and deliver strategic governance recommendations to management.
• Perform other job-related duties as assigned from time to time.

Benefits

• Hybrid Flexibility: Enjoy the best of both worlds. With optional work from home on Mondays and Fridays and join your team in the office Tuesday through Thursday to collaborate and learn. We provide the technology and tools you need for both your office and home workspace from day one.
• Dining on Us: Depending on your location, we may provide a stipend that can be used at our on-site cafeteria or a meal allowance to keep you fueled.
• Continuous Learning: Unlock your potential through Sentry University and take advantage of our tuition reimbursement program.
• Comprehensive Benefits: We support your whole self with group medical, dental, and vision insurance along with parental leave, pet insurance, caregiver leave, and wellness resources. Options for HSA, FSA, and Dependent Care FSA are available.
• Work-Life Balance: Enjoy your generous Paid Time Off allowance to rest and take advantage of paid Volunteer Time Off to support your community.
• Investing in Your Future: We’re committed to your long-term financial well-being. We offer a 100% company match on the first 8% you contribute to your 401(k) each pay period, and those funds vest immediately.
• Giving Back: Through the Sentry Foundation, we’re proud to support the United Way and make a difference in our communities.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: Associate degree