Governance, Risk, and Compliance Analyst - Unilever Prestige

Governance, Risk, and Compliance Analyst - Unilever Prestige

Unilever Prestige is the Luxury Beauty division of Unilever that holds eight companies/brands:
Dermalogica, Murad, Living Proof, Hourglass, Tatcha, Paula’s Choice, K18 and Garancia. The businesses have a global footprint, are omni-channel in nature and with a heavy index to e-commerce and direct to consumer offerings. Our brands blend luxury physical in-store experiences with digitalized e-commerce offerings including digital technologies embedded within product offerings. It operates a unique organizational model that places high emphasis on independence, entrepreneurship, and speed, all rooted in individual breadth and depth of capability.

The division is one of Unilever’s key strategic bets and has seen consistent double‑digit growth through both organic and M&A growth.

Reporting to the Senior Director of Information Security, the GRC Analyst will play a critical role in supporting the organization’s compliance and risk management programs. This position is responsible for assessing third‑party risks, maintaining the enterprise risk register, collecting audit evidence, and promoting adherence to compliance standards.

• Third‑Party Risk Assessments
  • Conduct risk assessments for vendors, partners, and other third parties.
  • Evaluate security, privacy, and compliance controls against organizational standards.
• Maintain and update the organizational risk register.
• Track mitigation plans and monitor risk status across business units.
• Audit Support
  • Collect and organize evidence for audits (including PCI and SOX).
  • Collaborate with stakeholders to ensure timely and accurate documentation.
• Privacy Compliance Support
  • Apply fundamental knowledge of U.S. or EU privacy laws (e.g., CCPA, GDPR).
  • Assist in privacy impact assessments and data protection reviews as needed.

Skills
:

• Strong communication skills for cross‑functional collaboration.
• Excellent communication skills for cross‑functional collaboration.

Knowledge
:

• Familiarity with regulatory frameworks such as PCI DSS, SOX, and privacy regulations (GDPR, CCPA).

Experience
:

• 2+ years of experience in compliance, risk management, or audit support.

This is a fully remote role with Dermalogica as the employer and on its employment terms.

Apply now and become a key contributor to the Unilever Prestige growth trajectory!

Dermalogica is an equal opportunity employer committed to fostering an inclusive culture where all employees are valued, supported, and empowered to succeed.