IT Governance, Risk & Compliance Analyst I

Plexus•Neenah, WI

About The Position

The IT Governance, Risk & Compliance Analyst I supports the development, implementation, and monitoring of IT policies, risk management processes, and compliance requirements. Serving as a first-line representative of the IT Governance, Risk, and Compliance team, this role builds foundational relationships with technical and non-technical teams to ensure audit evidence is collected accurately and on time. The analyst also assists with proactive IT control plans, control testing, and audit readiness, with close attention to detail. The position supports internal security reviews and readiness assessments against industry frameworks and regulations, documents IT risks, coordinates audit evidence, supports IT control design and testing, and helps keep policies and procedures current. It also supports third-party risk management by helping complete vendor security questionnaires and assess third-party security posture. All GT team members are responsible for upholding the organization's cybersecurity posture by following security policies and procedures, participating in training, protecting data and systems, identifying and mitigating vulnerabilities, and promptly reporting suspicious activity or potential security incidents. Plexus describes a comprehensive benefits package, investment in team-member development, an inclusive culture, and a focus on work-life balance. The stated annual salary range is $58,100 to $87,100, with the offer dependent on factors including geographic location, experience, education, licensure requirements, and skill level.

Requirements

Foundational knowledge of industry-standard security frameworks, such as NIST CSF, ISO 27001, or CIS Controls, and their application in a corporate security program.
Basic understanding of core security technologies such as EDR, DLP, SIEM, and Vulnerability Management, and their role in validating control effectiveness and maintaining regulatory compliance.
Ability to translate technical security data into clear, concise documentation and reports for non-technical stakeholders.
Proficiency with spreadsheet software, such as Google Sheets or Microsoft Excel, for tracking compliance metrics and generating reports.

Nice To Haves

Bachelor’s degree with at least 1 year of related experience; equivalent combinations of education and/or experience will be considered.
Industry-recognized certification such as CompTIA Security+ or CISA.
Basic grasp of enterprise IT architecture, including cloud environments (GCP/AWS/Azure), networking, and database management, and the ability to identify where security controls are necessary to mitigate risk.
Familiarity with Google Cloud, AWS, or Azure cloud security concepts.
Experience in technical support or help desk work, preferably in a manufacturing setting.

Responsibilities

Assist with internal security reviews and readiness assessments against industry frameworks and regulations.
Help identify and document IT risks in the Risk Register.
Coordinate the collection and organization of evidence for internal and external audits, including initial quality review.
Support the design of IT controls and execute control tests.
Track and follow up with stakeholders to ensure timely evidence submissions and control performance.
Assist in drafting, reviewing, and proposing updates to IT policies, standards, and procedures.
Support the GRC team in completing prospective-vendor security questionnaires and evaluating third-party security posture against organizational standards.
Follow security policies and procedures, participate in training, protect data and systems, identify and mitigate vulnerabilities, and promptly report suspicious activity or potential security incidents.