Sr GRC Analyst Policy & Compliance

The Hershey Company•Lower Swatara Township, PA

About The Position

This role contributes to the implementation and ongoing management of the IT control program, partnering with technology teams to establish, document, monitor, and improve controls that support governance, risk management, and compliance objectives. The role serves as a partner to IT stakeholders, ensuring controls are aligned to policies, regulatory requirements, and industry frameworks while maintaining accurate control records, assessments, and reporting within ServiceNow. The role drives accountability for control ownership, issue remediation, and continuous improvement across the IT environment.

Requirements

3+ years experience
BS Degree required

Nice To Haves

ServiceNow or similar compliance management tooling

Responsibilities

Partners with technology teams to identify, design, document, and implement IT controls that address operational, regulatory, and risk management requirements. Ensures controls are appropriately designed, assigned to accountable owners, and aligned with enterprise governance expectations. Provides guidance on control objectives, requirements, and implementation approaches.
Maintains the IT control inventory and supporting governance records within ServiceNow. Ensures controls, risks, issues, and related evidence are accurately documented, monitored, and maintained throughout their lifecycle. Supports the adoption and effective use of ServiceNow governance, risk, and compliance capabilities across the technology organization.
Coordinates periodic reviews, assessments, and evaluations of control effectiveness. Identifies control gaps, process weaknesses, and opportunities for enhancement. Partners with control owners to develop remediation plans, track corrective actions, and validate resolution of identified issues.
Collaborates with technology, risk, and audit stakeholders to assess the impact of regulatory requirements, policy obligations, and identified risks on the control environment. Supports risk assessments, compliance initiatives, audit requests, and governance reporting by ensuring control information is complete, accurate, and readily available.
Develops metrics, dashboards, and reporting that provide insight into control performance, compliance status, remediation progress, and program maturity. Identifies opportunities to streamline governance processes, improve control coverage, and enhance reporting capabilities. Drives adoption of best practices that strengthen the effectiveness and efficiency of the IT control program.