Global Sr GRC Analyst - 29564

AmeriGas AmeriGas is a Drug Free Workplace. Candidates must be able to pass a pre-employment drug screen and a criminal background check. AmeriGas is an Equal Opportunity Employer. Location: King Of Prussia, PA, US, 19406 Workplace Environment: Onsite Company: AmeriGas Propane, Inc. Requisition Number: 29564 When you work for AmeriGas, you become a part of something BIG! Founded in 1959, AmeriGas is the nation's premier propane company, serving over 1.5 million residential, commercial, industrial and motor fuel propane customers. Together, over 6,500 dedicated professionals will deliver over 1 billion gallons of propane from 1,800+ distribution points across the United States. Job Summary: The Global Cybersecurity Senior GRC Analyst plays a critical role in ensuring that the organization operates within its regulatory, legal, and compliance obligations while managing risk effectively. The Global GRC Senior Analyst will report directly to the Global Cybersecurity Governance, Risk and Compliance Manager. This role involves collaborating with cross-functional teams to design, implement, and maintain governance, risk, and compliance processes. The ideal candidate is detail-oriented, analytical, and experienced in regulatory compliance, risk management frameworks, and governance best practices and must develop and apply continuous improvement strategies in all aspects of the job function. Key Responsibilities: Governance: Develop and maintain corporate policies, procedures, and frameworks to align with industry best practices (e.g., NIST CSF, SOX, PCI, etc.). Assist with the development and maintenance of GRC process and procedure documentation. Ensure IT functions are in compliance with best practices and company policies and standards through assessments (i.e. peer reviews, audits, etc.) Track key risk indicators and security metrics Risk Management: Assist with conducting gap assessments to identify threats, vulnerabilities, and potential impacts on the organization. Develop and maintain the risk register, ensuring risks are documented, prioritized, and mitigated. Perform third-party/vendor risk assessments to evaluate potential risks associated with external partnerships and perform on-going monitoring to assess risk of engagement. Maintain centralize documentation, continuous monitoring for vendors, formal escalation protocols for non-compliance to ensure alignment with enterprise risk tolerance. Document risk acceptance decisions and compensating View the full job description on the employer's website. Equal employment opportunity, including veterans and individuals with disabilities. PI287262666 / 15-1212.00 Information Security Analysts