Senior Analyst, IT Governance, Risk and Compliance (GRC)

Meet Vestis: For the People Who Make It All Work

At Vestis, we provide uniforms, workplace supplies, and professional cleaning that help businesses simplify their workday and keep their teams safe, confident, and focused on what matters most. More than a provider, we are a partner in productivity, trusted to keep you running.

Join us and build a career supporting the people who make it all work.

Vestis is seeking a highly motivated Senior Analyst, IT Risk & Governance to support the organizations technology governance, risk management, compliance, and control programs. Reporting to the Sr. Director of IT Governance, Risk and Compliance, this role is responsible for coordinating IT risk assessments, maintaining governance processes, overseeing the security operations vendor partner relationship, developing risk reporting and dashboards, and partnering with technology and business teams to strengthen the companys overall risk posture.

The Senior Analyst serves as a trusted partner to Internal Audit, Operations, and Finance by helping ensure technology risks are identified, assessed, monitored, and mitigated in a practical and business-aligned manner. This role provides analytical support for enterprise governance initiatives involving cybersecurity, cloud services, data protection, third-party risk, artificial intelligence, and regulatory compliance.

Responsibilities/Essential Functions:

• Support administration and continuous improvement of the IT Governance, Risk, and Compliance (GRC) program.
• Maintain the enterprise IT risk register, including documentation of risk owners, mitigation plans, due dates, and risk ratings.
• Facilitate periodic IT risk assessments and control reviews across infrastructure, applications, data, cloud platforms, and vendor environments.
• Assist business and technology teams in identifying emerging risks and developing risk mitigation plans.
• Coordinate governance committee meetings, risk reviews, and action item tracking.
• Support policy management processes, including policy updates, exception tracking, and annual reviews.
• Support compliance activities related to SOX, PCI DSS, privacy requirements, cybersecurity frameworks, and other regulatory obligations.
• Assist in conducting technology vendor and third-party risk assessments.
• Coordinate collection and review of security documentation, including SOC reports, security questionnaires, and attestations.
• Monitor remediation activities associated with vendor risk findings.
• Maintain vendor risk inventories and reporting.
• Develop and maintain executive dashboards and reporting using Power BI and related tools.
• Coordinate with security operations' vendor partner to gather analytics to assess trends associated with technology risks, vulnerabilities, audit findings, compliance activities, and remediation performance.
• Prepare materials for executive leadership, governance committees, and auditors.
• Produce recurring risk and compliance reports to support management decision-making.
• Partner with security operations vendor partner, infrastructure, application, and data teams to track risks identified through vulnerability management, incident response, and other security activities.
• Assist with governance related to AI, cloud services, data privacy, and emerging technologies.
• Support awareness initiatives that strengthen the organizations culture of governance and risk management.

Knowledge/Skills/Abilities:

• Build strong partnerships within and across IT, Internal Audit, Finance, Legal, Operations, and business functions.
• Communicate risk findings and recommendations in clear business terms.
• Influence stakeholders to address risks and compliance gaps through effective reporting and data-driven insights.
• Promote consistent governance and risk management practices throughout the organization.
• Working knowledge of risk management frameworks such as NIST, ISO 27001, COBIT, or similar frameworks.
• Strong analytical and problem-solving skills.

Experience/Qualifications:

• Bachelors degree in Information Technology, Finance, Business, or related discipline.
• 10+ years' experience in IT governance, risk management, internal audit, security operations, or related disciplines.
• Experience supporting audits, compliance programs, or control assessments.
• Strong analytical and problem-solving skills.
• Experience with Microsoft Excel, Power BI, and reporting tools.
• Excellent written and verbal communication skills.
• Experience supporting SOX, PCI DSS, privacy, or security programs.
• Experience with GRC platforms such as ServiceNow GRC, Archer, AuditBoard, or similar tools.
• Familiarity with cloud platforms (Azure, AWS, or Google Cloud).
• Professional certifications such as: CRISC, CISA, CGRC, CDPSE, CISSP (Associate or progressing toward) desired.

Headquartered in Roswell, GA, Vestis is the second largest provider in the industry with over 300,000 customer locations and approximately 20,000 teammates across North America. Vestis is a leader in the B2B uniform and workplace supplies category. Vestis provides clean and safe uniform services and workplace supplies to a broad range of North American customers from Fortune 500 companies to locally owned small businesses across a broad set of end markets. The Company's comprehensive service offering includes a full-service uniform rental program, cleanroom and other specialty garment processing, floor mats, towels, linens, managed restroom services, first aid supplies and more.

Vestis is an equal-opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, relation, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, or veteran status.

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities

This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.

Vestis Commitment to Equal Opportunity Employment

If you are a job seeker with a disability and require a reasonable accommodation to apply for one of our jobs, you will find the contact information below to request the appropriate accommodation.

Reasonable Accommodations and the Online Application Process

Consistent with Vestis and Canadian Linen's commitment to equal employment opportunity, we provide reasonable accommodations to qualified individuals with disabilities who need assistance in applying electronically for a position with Vestis or Canadian Linen, unless doing so would impose an undue hardship. To request a reasonable accommodation for this purpose, please call 1-833-901-8823 or email us at accessibility@vestis.com.

Please note that this phone number is to be used solely to request an accommodation with respect to the online application process. Calls for any other reason will not be returned. Reasonable accommodation requests are considered on a case-by-case basis.

Thank you for your interest in an employment opportunity with Vestis, Canadian Linen and Québec Linge.