Senior Analyst Governace, Risk and Compliance

Dentsply Sirona, Inc•Spring Garden Township, PA

About The Position

Dentsply Sirona is the world’s largest manufacturer of professional dental products and technologies, with a 130-year history of innovation and service to the dental industry and patients worldwide. Dentsply Sirona develops, manufactures, and markets a comprehensive solutions offering including dental and oral health products as well as other consumable medical devices under a strong portfolio of world class brands. Dentsply Sirona’s products provide innovative, high-quality and effective solutions to advance patient care and deliver better and safer dentistry. Dentsply Sirona’s global headquarters is located in Charlotte, North Carolina. The company’s shares are listed in the United States on NASDAQ under the symbol XRAY. Summary: The Senior Analyst of Governance, Risk, and Compliance (GRC) reports to the Director/Manager of Governance, Risk and Compliance and is responsible for executing key activities that support the company’s enterprise GRC program. This role provides hands-on support for risk assessments, audit readiness, regulatory compliance, and third-party reviews. The Senior Analyst partners with business and IT stakeholders to collect evidence, analyze risks, and ensure that policies and controls are implemented consistently. This position is ideal for an experienced practitioner who can translate compliance requirements into practical, repeatable processes and provide meaningful insights through data and reporting.

Requirements

Bachelor’s Degree in IT, Business, Audit or related field

Nice To Haves

Security or compliance certifications such as CISA, CRISC, or CompTIA Security+.
ISO 27001 Implementer/Auditor or equivalent a plus.

Responsibilities

Support the implementation of security and compliance policies, standards, and procedures.
Maintain documentation libraries, policy repositories, and RACI matrices.
Assist in awareness and training initiatives to drive policy adoption.
Conduct and document risk assessments with business and IT owners.
Update and track items in the enterprise risk register.
Monitor remediation plans and escalate overdue items to management.
Gather and organize evidence for audits, certifications, and assessments (e.g., ISO 27001, SOC 2, HIPAA, GDPR).
Assist with third-party risk assessments and vendor due diligence.
Prepare responses to customer compliance questionnaires under manager guidance.
Monitor regulatory and industry changes, contributing to impact assessments.
Compile and analyze data for GRC dashboards and metrics.
Provide reports that highlight control performance, remediation status, and compliance progress.
Work closely with IT, Security, Privacy, and Legal to ensure timely delivery of audit and compliance tasks.
Act as a liaison between technical teams and business stakeholders for evidence gathering and issue resolution.
Additional responsibilities as assigned.