The posting
As a GRC Analyst, you’ll test security controls, assess risk and compliance, report findings to stakeholders, and maintain information security policies and standards.
You'll participate in information security risk management by testing the effectiveness of security controls, assessing security controls and compliance for suppliers, systems, and processes against threats and industry best practices to confirm adherence to security and compliance requirements. You'll report findings and recommendations to information security management and business stakeholders to ensure any concerns are resolved. You'll also review and maintain ongoing governance of the organization's information security policies and standards.
This position will be located at our Office in Stevens Point, WI in a hybrid work model and is not a fully remote opportunity.
Sentry does not offer employment in this position to holders of F-1, J-1, and H-1 Visas for the purpose of obtaining practical experience.
What You'll Do
As an Information Security GRC Analyst, you will:
- Design, implement, and maintain the IS governance framework, ensuring alignment with corporate governance and regulatory requirements.
- Establish and oversee IT and IS control objectives and approve the design and methodology used for control effectiveness testing.
- Create, update, and manage the review lifecycle of security policies, standards, and procedures to ensure compliance with governance frameworks.
- Validate the design and integrity of the control effectiveness testing program, ensuring methodologies are sound, identifying testing gaps, and monitoring remediation efforts.
- Define, monitor, and report Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs) related to overall control effectiveness, risk mitigations, and governance maturity.
- Validate the end-to-end process for reviewing and approving security exception requests, ensuring proper documentation and process adherence.
- Define the strategic direction and selection criteria for GRC platforms, and lead research into GRC tooling optimization.
- Coordinate internal and external audit alignment for governance-related areas (e.g., framework design, governance metrics creation and reporting, control objective definition).
- Contribute to the definition and communication of Sentry’s information security risk appetite, collaborating with executive leadership.
- Review and understand fundamental regulations and frameworks related to cybersecurity.
Additionally, you will:
- Periodically review and enhance governance methodologies and drive improvements to mature the IS governance program.
- Collaborate on the research and development of security initiatives and deliver strategic governance recommendations to management.
- Perform other job-related duties as assigned from time to time.
What it Takes
- Bachelor’s degree or equivalent work experience
- Minimum 2 years of related work experience in information security, internal audit, security risk management or related field
- Successfully completed or able to work towards a security certification (e.g., CISA, CRISC, CISSP, PCI ISA, Security+, etc.) preferred.
- Demonstrated experience in information security policy development, management, or framework design.
- Experience with control design, control effectiveness testing methodologies, or audit coordination.
- Strong analytical skills with an ability to define and track metrics (KPIs/KRIs).
- Proven ability to facilitate cross-functional processes and drive documentation.
Here is what you can look forward to as part of our team:
At Sentry, your total rewards go beyond competitive compensation. We’re committed to supporting the whole you, which is why we offer a comprehensive package designed to help you thrive both professionally and personally.
- Hybrid Flexibility: Enjoy the best of both worlds. With optional work from home on Mondays and Fridays and join your team in the office Tuesday through Thursday to collaborate and learn. We provide the technology and tools you need for both your office and home workspace from day one.
- Dining on Us: Depending on your location, we may provide a stipend that can be used at our on-site cafeteria or a meal allowance to keep you fueled.
- Continuous Learning: Unlock your potential through Sentry University and take advantage of our tuition reimbursement program.
- Comprehensive Benefits: We support your whole self with group medical, dental, and vision insurance along with parental leave, pet insurance, caregiver leave, and wellness resources. Options for HSA, FSA, and Dependent Care FSA are available.
- Work-Life Balance: Enjoy your generous Paid Time Off allowance to rest and take advantage of paid Volunteer Time Off to support your community.
- Investing in Your Future: We’re committed to your long-term financial well-being. We offer a 100% company match on the first 8% you contribute to your 401(k) each pay period, and those funds vest immediately.
- Giving Back: Through the Sentry Foundation, we’re proud to support the United Way and make a difference in our communities.
Why Join Sentry?
At Sentry, we believe our people are the heart of our success. We’re proud to be recognized for the culture we’ve built, earning spots on Forbes’ lists for America’s Best Midsize Employers and Best Employers for New Grads, as well as Newsweek’s America’s Greatest Workplaces for Women and Diversity. These honors reflect our commitment to your professional satisfaction and growth.
Building on a Legacy
Our future is bright, but it’s anchored in a long history of stability. Since our founding in 1904, we’ve dedicated ourselves to helping businesses protect their futures. That trust has made us one of the largest and most financially stable mutual insurance companies in the U.S. We’re proud to have maintained an A+ rating from A.M. Best, the industry’s leading authority, for over 30 years.
Your Career, Our Community
Whether you’re working at our headquarters in Stevens Point, Wisconsin, or one of our many offices across the country, you’ll find a challenging and rewarding environment. Explore the Our Teams tab on our Career Page to see the diverse career paths we offer, with a focus on ongoing development and professional growth.
Ready to own your future? Join us at Sentry, opportunities await!
Tha Xiong
Equal Employment Opportunity
Sentry is an Equal Opportunity Employer. It is our policy that there be no discrimination in employment based on race, color, national origin, religion, sex, disability, age, marital status, or sexual orientation.
