Senior Governance & Compliance Analyst

Hamilton Beach Brands, Inc.•Glen Allen, VA

7d•$76,790 - $93,245•Hybrid

About The Position

Hamilton Beach Brands is seeking a Senior Governance & Compliance Analyst to join their team. This role is crucial for supporting the organization's IT governance, compliance, privacy, and security programs. The Senior Governance & Compliance Analyst will ensure adherence to regulatory requirements and internal controls, manage audit and risk management activities, support data privacy and retention initiatives, and drive employee awareness through training programs. This position collaborates with IT, Legal, HR, and business leaders to enhance compliance practices, reduce risk, and maintain the security and integrity of company systems and data, fostering a culture of accountability and continuous improvement. This is a hybrid position based at the Corporate Headquarters in Glen Allen, Va., reporting to the VP, Technology.

Requirements

Bachelor’s degree and 5+ years of applicable work experience.
Working experience with IT Risk Assessments and knowledge of Information Security regulatory compliance (GLBA, GDPR, PCI, etc.).
Minimum of 3 years’ experience working within an IT department; 10 years preferred.
Minimum of 5 years’ IT audit or audit experience; 10 years preferred.
3+ years of IT training experience.
Familiarity with IT risk assessment frameworks and control testing methodologies (e.g., COIT, NIST, ISO 27001).
Demonstrated ability to build strong relationships and influence stakeholders at all levels of the organization, including executive leadership, while effectively communicating complex regulatory, compliance, and technical concepts to diverse audiences.
Highly organized and adaptable professional with strong judgment, attention to detail, and a proactive approach to managing multiple priorities, mitigating risk, safeguarding confidential information, and collaborating across cross-functional teams in a dynamic environment.

Nice To Haves

Experience supporting SOX or similar internal controls compliance programs preferred

Responsibilities

Execute IT governance and compliance activities for day-to-day operations, including endpoint security, IT controls, and IT/security awareness training, ensuring compliance with internal and external regulations and audit requests.
Support e-Discovery efforts and help maintain the security and reliability of company systems and data.
Execute privacy, GDPR, and data recovery/retention policies to meet growing compliance requirements, implementing processes in partnership with the VP, Information Technology, Legal, and outside experts.
Manage the creation, deployment, and execution of IT e-training and user enrollment for a global workforce, improving employee efficiency and streamlining new employee onboarding.
Manage the creation, deployment, and execution of collaborative technologies to improve productivity and cross-functional efficiency across HR, Legal, and Governance departments.
Serve as a key point of contact for internal and external audit requests, coordinating evidence collection and ensuring timely, accurate responses.
Monitor and interpret evolving regulatory and legal requirements (e.g., GDPR, GLBA, PCI) to assess impact and recommend necessary changes to policies and controls.
Support vendor and third-party risk assessments related to data security, privacy, and compliance obligations.
Maintain and continuously improve documentation on the IT controls framework to support audit readiness and operational consistency.
Prepare compliance-related updates and reporting material for the Executive Committee and other senior stakeholders as needed.