Sr Governance, Risk & Compliance Analyst

Job Summary:

The Sr. Analyst, Risk and Compliance will be part of our Legal team, reporting directly to the Sr Mgr, Governance, Risk & Compliance. The Sr Analyst is responsible for evaluating, supporting and advising the evolution maintenance and review of Zoro standards, guidelines, policies and control procedures; conducting and maintaining required audits, reports and facilitation with key stakeholders.

Duties and Responsibilities: 

• Advocate on behalf of the GRC team in collaboration with stakeholders to identify and implement new processes, make recommendations regarding complex analysis and interpretation and determine the escalation state of potential issues.
• Own the approval, maintenance and review of Zoro Standards, Guidelines, Policies and Control Procedures, developing documentation for the GRC and Legal team as necessary.  
• Liaise with key stakeholders to ensure Zoro is aware and managing applicable policies and procedures.
• Maintain document taxonomy and control infrastructure to support GRC and Legal functions
• Act as the Zoro Records Management Coordinator, and support the records management program 
• Interface with Grainger Policy Management team to facilitate access to Grainger Policies and Administrative Procedures; monitor policy updates
• Business Continuity /Disaster Recovery and Incident Response Program Support; maintaining annual and ad hoc reporting and documentation, assisting with Plan and program updates, conducting training for stakeholders and supporting reporting.
• Provide team evidence collection throughout various audits; tracking and filing evidence submitted via Audit Board, maintain Audit Remediation records and ensure key documentation is acquired in a timely manner.
• Conduct Quarterly User Access Reviews 
• Maintain awareness and appropriately influence department strategy regarding regulations related to governance, risk and compliance in the ecommerce industry; escalating areas of concern as needed.
• Proactively identify and anticipate emerging compliance issues resulting from Incident Response processes; review and remediation or escalating to Sr leadership when necessary.
• Provide Compliance review of third party risk management programs and practices, including assisting with vendor reviews, assisting with vendor reporting and audit assistance, as needed. 
• Maintain a repository of training and awareness materials used by the Legal team, including training materials, event schedules and attendance tracking.

Minimum Qualifications:

• Bachelor's Degree in Business or related field
• 3-4 years of relevant experience 
• Strong understanding of Governance, Risk and Compliance principles, methodologies and reporting requirements for the technology and eCommerce sectors.
• Advanced ability to analyze information in order to interpret rules, regulations, policies and standards

Preferred Qualifications:

• CCEP, CISP or equivalent certification or the ability to acquire certification within one year
• Strong collaborations skills
• Ability to work cross functionally and strong project management skills 
• Advanced proficiency in Google Suite (spreadsheets and reports)