Governance, Risk and Compliance Analyst

Join our Growing Team and see why Summit Utilities, Inc was named as one of the Fastest Growing Denver Area Private Companies 2019 and 2020; Best Places to Work in Maine 2019, 2020, 2021, 2022 and 2023; and Best Places to Work in Arkansas 2020 and 2023, Oklahoma 2022 and 2023 and Missouri 2023. Summit was also recently named one of Forbes 2023 America’s Best Small Employers.

Summit is a growing natural gas utility company providing safe, reliable and clean burning natural gas service to homes and businesses in Arkansas, Colorado, Maine, Missouri and Oklahoma. Being part of the Summit team means embracing excellence, diversity and innovation, committing to safety each and every day, and doing all that we can to serve each other, our customers and the communities where we live. We aim to bring warmth and energy to everything we do.

We have an exciting opportunity for a Governance, Risk and Compliance Analyst who can work remotely from one of the following states: AR, TX, OK, SC, TN, KS, LA, FL, ME or MO.

Position Summary

Summit Utilities is a leading provider of natural gas and renewable energy solutions in the United States. We are looking for a Governance, Risk, and Compliance (GRC) analyst to join our team and help us ensure that our operations are aligned with industry standards, regulations, and best practices. The GRC analyst will be responsible for conducting risk assessments, managing change control processes, and identifying and documenting risks and controls for IT and OT environments. The ideal candidate will have at least 5-7 years of experience in GRC, information security, or related fields, and preferably a CISSP certification or equivalent.

Primary Duties And Responsibilities

• Perform risk assessments and audits on various aspects of the organization, such as IT systems, business processes, third-party vendors, and compliance requirements.
• Develop Plans of Action and Milestones (POA&Ms) to track activities related to risk management.
• Maintain risk registers, risk matrices, and risk reports for senior management and stakeholders.
• Manage and monitor the change control process, ensuring that all changes are properly documented, approved, tested, and implemented.
• Identify and document risks and controls and provide recommendations for risk mitigation and control enhancement.
• Coordinate with internal and external auditors, regulators, and other parties on GRC-related matters.
• Stay updated on the latest industry trends, standards, regulations, and best practices in GRC and information security.
  
  

Education And Work Experience

• Bachelor's degree in computer science, information systems, business administration, or related field.
• At least 5-7 years of experience in GRC, information security, or related fields.
• CISSP certification or equivalent preferred, but not required.
• Strong knowledge of GRC frameworks, methodologies, and tools, such as NIST, ISO, COBIT, CIS, etc.
• Excellent communication, analytical, and problem-solving skills.
• Ability to work independently and collaboratively in a fast-paced environment.
• Attention to detail and accuracy.
  
  

Knowledge, Skills, Abilities

• Excellent communication, analytical, and problem-solving skills.
• Ability to work independently and collaboratively in a fast-paced environment.
• Attention to detail and accuracy.
  
  

Summit offers competitive pay and medical/dental/vision and other benefits that provide flexibility, choice and support to our employees when they need it most. We understand that home and family are essential pieces of your life, and our benefits are designed to support you both at work and at home.

Summit Utilities, Inc. is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, gender, gender identity, sexual orientation, age, status as a protected veteran, or status as a qualified individual with disability.