Senior Governance, Risk & Compliance Analyst (GRC)

Choice Hotels International • Scottsdale, AZ

1d • Hybrid

About The Position

Choice Hotels is hiring a Senior Governance, Risk & Compliance (GRC) Analyst for its Technology Governance & Service Delivery team in Scottsdale, Arizona. The team manages technology risk, security and regulatory controls, policies, and audits. In this individual-contributor role, you will lead risk assessments, control reviews, and audits that help protect Choice’s business, franchisees, and guests’ data. The position is hybrid, with four days onsite at the North Scottsdale office, and reports to the Senior Manager, GRC. You will collaborate with Technology, Internal Audit, Legal, Privacy, and other teams.

Requirements

• Bachelor’s degree in Information Systems, Business, Accounting, Cybersecurity, or a related field, or equivalent experience.
• At least 7 years of experience in Governance, Risk & Compliance, IT audit, cybersecurity, or related fields.
• Experience leading risk assessments, control testing, and audit engagements with minimal supervision.
• Proficiency with Microsoft Outlook, Excel, PowerPoint, and Word.
• Deep working knowledge of frameworks such as SOX, PCI, NIST CSF, ISO 27001, and SOC 2.
• Advanced analytical and critical-thinking skills.
• Ability to influence senior technical and non-technical stakeholders.
• Clear written and verbal communication skills, including executive-level reporting.

Nice To Haves

• Experience with ServiceNow Integrated Risk Management (IRM).

Responsibilities

• Independently lead technology and enterprise risk assessments, identify emerging risks, evaluate impact and likelihood, and recommend practical treatment strategies.
• Partner with business and technology owners to assign accountability and track risks through remediation.
• Lead reviews of control design and operating effectiveness aligned with PCI, SOX, NIST CSF, and related frameworks.
• Serve as a primary point of contact for external auditors, including planning, walkthroughs, evidence coordination, and remediation tracking.
• Monitor changes to regulatory, contractual, and industry standards; translate them into clear control expectations and recommend process improvements.
• Own technology GRC policies and lead their lifecycle, including drafting, stakeholder review, approval, rollout, and periodic refresh.
• Design and maintain dashboards, metrics, KPIs, and KRIs; present risk trends and root-cause insights to leadership and governance forums.
• Own and update risk and compliance training content and report on completion and exceptions.
• Mentor junior analysts and drive continuous improvement and standardization across GRC processes.

Benefits

• Competitive compensation and benefits, including medical, dental, and vision coverage.
• Paid leave and time off for holidays, vacation, personal, family, volunteer, sick, jury duty, bereavement, military, and religious observance.
• Financial benefits for retirement and health savings.
• Employee recognition programs.
• Discounts at Choice hotels worldwide.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior