IT GRC Analyst

IT GRC Analyst

Location: Philadelphia, PA Client: Philadelphia Gas Works Duration: 12 Months Notes- This is a Hybrid Role with on-site interview.

Job Description

Governance Framework Management Develop, implement, maintain, and update PGW's IT and AI governance frameworks, standards, policies, and operational controls to ensure alignment with industry standards and regulatory expectations. Manage enterprise GRC workflows within OneTrust, establishing standardized compliance tracking, continuous control monitoring, and automated risk reporting across complex IT and AI ecosystems. Help benchmark governance programs against emerging global AI regulations, ethical standards, and industry guidelines, driving proactive policy updates to mitigate operational and reputational risks.

Risk Assessment & Compliance Strategy Help lead IT Governance, Risk, and Compliance (GRC) efforts, ensuring that technology initiatives adhere to internal policies, third-party audit requirements, and external standards. Collaborate with data engineering and security teams to evaluate data governance maturity using platforms such as Databricks and/or other Data Governance Tools. Help in establishing strategic guardrails for data governance and AI security by partnering with enterprise data architects and security leads using platforms such as Databricks, Microsoft Purview, and Varonis. Third-Party & Vendor Risk Auditing Help set criteria and perform vendor compliance audits and assessments for third-party IT applications, cloud providers, and external AI tools prior to onboard and during periodic reviews, utilizing Help negotiate risk mitigation plans with external vendors.

Reporting, Analytics & Leadership Communication Synthesize complex technical risk data into clear, concise, and executive-ready dashboards, reports, and presentations for management and senior leadership. Help design and maintain governance metrics, KPIs, and report models using business intelligence tools such as Tableau to visualize risk trends and compliance progress over time. Serve as the primary subject matter expert for internal and external GRC audits, providing expert guidance on compliance readiness and control optimization.

Skills/experience Required Bachelor's degree in information technology, Management Information Systems, IT Audit or other related fields of study. Master's Degree preferred Minimum of 4 years of hands-on experience in an Information Technology Governance Environment Industry Certifications preferred (e.g., CRISC or CISA) Strong oral and written communication skills for knowledge transfer. Experience to conduct risk assessments to determine actions and strategic next steps Demonstrated effectiveness in Governance, Risk and Compliance Proficiency with software products, including: IT Governance Tool – OneTrust preferred Data Governance Tools (e.g., Databricks, Alation, Collibra) Data and AI Security (e.g., Varonis, MS Purview) Vendor Audit Maintaining, updating, and creating Frameworks, controls, and policies Ability to create clear and concise reports and presentation for management and leadership Experience with Tableau or other BI tools a plus

About Us: Since 2000, Tri-Force Consulting Services has been an MBE/SDB certified IT Consulting firm in the Philadelphia region. Tri-Force specializes in IT staffing, software development (web and mobile apps), systems integration, data analytics, system automation, cybersecurity, and cloud technology solutions for government and commercial clients. Tri-Force works with clients to overcome obstacles such as increasing productivity, increasing efficiencies through automation, and lowering costs. Our clients benefit from our three distinguishing core values: integrity, diligence, and technological excellence. Tri-Force is a six-time winner among the fastest-growing companies in Philadelphia and a four-time winner on the Inc. 5000 list of the nation's fastest-growing companies.