Policy Analyst

Note: If you apply for a role at Hershey through our career's website, we may use technologies that use automation to filter your candidacy based on objective criteria. We also use AI-enabled tools that help us facilitate the selection of our future Hershey talent. These tools may help with activities such as matching and scoring candidates to roles based on requirements and scheduling interviews. These systems process only the information you provide in your application, including your resume, work history, education, and responses to screening questions. While these technologies assist with certain steps in our recruitment process and may provide recommendations, all final decisions, including those affecting whether candidates advance to subsequent stages in the applicant process, are made by our talent acquisition teams with meaningful human review and independent judgment. Depending on your location and the specific role you apply for, additional disclosures about our use of AI in recruitment may be provided to you separately.

Location: Hershey, PA

Career Level T30

At The Hershey Company, our culture is rooted in purpose and inspired by Milton Hershey's enduring vision that business should create opportunity for others. Through our commitment to corporate philanthropy, we create positive impact by supporting communities, helping children thrive, and operating as a business for good. This includes our deep and long standing partnership with Milton Hershey School, where we invest in education, workforce readiness, and hands on engagement to help students succeed beyond the classroom. Supported by strategic grantmaking, product donations, cross brand collaboration, and strong employee volunteerism, Hershey offers a place to work where making a difference-locally and globally-is part of how we do business every day.

The Hershey Company is an industry-leading snacks company known for making more moments of goodness through its iconic brands. With a strong portfolio across chocolate, confectionery, and salty snacks, Hershey delights consumers every day. Our beloved brands include Hershey's, Reese's, KitKat, Dots Pretzels, Lesser Evil, Jolly Rancher, Twizzlers, Ice Breakers, and more.

At Hershey, we are committed to making a meaningful difference in the communities where we live, work, and do business. This commitment originated with our founder, Milton Hershey, and continues to shape who we are today.

Guided by our employee value proposition, Lead Today. Create Tomorrow, we empower our people to drive impact now while shaping what comes next. Our One Hershey mindset brings teams together across functions, geographies, and businesses, enabling us to operate with speed, collaboration, and shared purpose.

The Hershey Company is proud to be recognized as a top employer in the United States, reflecting our commitment to our people, culture, and purpose.

The Policy Analyst, GRC (Governance, Risk & Compliance) supports the development, maintenance, and lifecycle management of IT and Information Security policies, standards, procedures, and guidelines. This role partners with IT, Information Security, and business stakeholders to help ensure governance documentation is clear, current, and aligned with Hershey's common controls framework, risk management practices, operational requirements, and applicable industry frameworks.

This position provides an opportunity to build foundational experience in Governance, Risk & Compliance (GRC) while supporting the continued maturity of Hershey's IT governance program.

What will you do?

Policy & Governance Management: Support the creation, review, maintenance, and lifecycle management of IT and Information Security policies, standards, procedures, and guidelines.

Stakeholder Collaboration: Work with IT, Information Security, and business stakeholders to develop and update governance documentation and coordinate reviews, feedback, approvals, and publication.

Standards Development: Provide templates, guidance, and support to IT and Information Security teams when developing standards and supporting governance documentation.

Controls & Framework Alignment: Help align policies and standards with Hershey's common controls framework and applicable industry and regulatory frameworks, including NIST, ISO, SOX, and PCI.

Risk & Compliance Alignment: Support updates to governance documentation resulting from risk assessments, control changes, audit findings, compliance requirements, issues, and remediation activities.

Policy Exception Support: Assist with administration and tracking of policy exceptions, including documentation, status, expiration dates, and stakeholder follow-up.

Governance Reporting & Improvement: Support governance metrics and reporting and identify opportunities to improve policy processes, templates, workflows, and documentation.

GRC Development: Build knowledge of governance, risk management, compliance, internal controls, and industry best practices through hands-on experience and collaboration with GRC team members.

Experience

• At least 1 year of professional experience in Information Technology, Information Security, Governance, Risk & Compliance, audit, business analysis, policy administration, or a related discipline.
• Foundational understanding of IT, Information Security, risk management, compliance, or internal controls preferred.
• Strong written and verbal communication skills.
• Ability to organize and maintain detailed documentation.
• Ability to collaborate with both technical and non-technical stakeholders.
• Strong attention to detail and willingness to learn new processes, technologies, and GRC concepts.
• Familiarity with GRC platforms, policy management tools, or ServiceNow is a plus.
• Exposure to industry frameworks such as NIST, ISO, SOX, or PCI is a plus.

Education

• Bachelor's degree in Information Technology, Information Security, Cybersecurity, Business, Risk Management, or a related discipline preferred, or equivalent relevant experience.

At Hershey, we offer competitive pay and a comprehensive total rewards package designed to support your wellbeing, financial security, and life outside of work.

• Health & Wellbeing: Medical, dental, and vision coverage, plus wellness programs that support your physical and mental health
• Financial Security: Competitive pay, annual incentive opportunities, and a 401(k) with company match
• Time Off & Flexibility: Paid time off, company holidays, and flexible ways of working where applicable
• Growth & Development: Career development programs, learning opportunities, and internal mobility

Benefits may vary based on role, location, and eligibility.

The anticipated base salary range for this role is $70,240 to $87,800per year. The actual base salary offered will depend on a variety of jobrelated factors, including, but not limited to, experience, skill set, education, and training. In addition to a market-competitive base salary, our Total Rewards package includes performancebased incentives and a comprehensive, competitive benefits package designed to support overall physical, mental, and financial wellbeing (as applicable).

Learn more about Hershey's benefits and all the resources Hershey provides to support our employees' physical, emotional, and financial wellbeing by visiting the Hershey Digital Employee Experience at

The Hershey Company is an Equal Opportunity Employer. The policy of The Hershey Company is to extend opportunities to qualified applicants and employees on an equal basis regardless of an individual's race, color, gender, age, national origin, religion, citizenship status, marital status, sexual orientation, gender identity, transgender status, physical or mental disability, protected veteran status, genetic information, pregnancy, or any other categories protected by applicable federal, state or local laws.

The Hershey Company is an Equal Opportunity Employer - Minority/Female/Disabled/Protected Veterans. You may request a reasonable accommodation if you are unable or limited in your ability to use or access our online application process as a result of a disability.

You can request an accommodation via phone or email.To request an accommodation via phone, please call View phone number on click.appcast.io and leave a voicemail with your contact information. You may also email a request for accommodation to View email address on click.appcast.io. Please be sure to include "Accommodation Needed" in the subject line. This will ensure that your email is routed to the appropriate contact who will handle your request.

#LI-RF1

#LI-Hybrid