IT Governance, Risk, and Compliance Analyst

Job Type

Full-time

At Pete & Gerry's, we were first to do it better, and are still doing it best. For nearly 30 years, we've been on a mission to produce healthy, delicious eggs and partner with family farms for meaningful impact. By raising hens outdoors as nature intended, we stay true to our roots every step of the way by keeping animal welfare, planet-friendly farming practices, and high-quality taste and nutrition at the heart of all we do, so you can always believe in what you buy.

At Pete & Gerry’s, we believe that when we care for each other, we all thrive. Across our farms, offices, and communities, we act as one flock — united by respect, collaboration, and a shared commitment to doing what’s right. We create an environment where every person feels valued, supported, and empowered to grow, because our success depends on the wellbeing of the people who make our mission possible.

The IT Governance, Risk, and Compliance (IT GRC) Compliance Analyst is responsible for supporting the development, implementation, and ongoing management of the organization's IT compliance and SOX control program. This role is a blend of both strategic and tactical work. This role works closely with IT, Finance, Audit and business stakeholders to ensure that IT General Controls (ITGCs), application controls, and compliance processes are operating effectively and supporting the organization's regulatory requirements.

The IT GRC Compliance Analyst serves as a key contributor in building a sustainable compliance framework, coordinating audit activities, performing user access reviews, gathering and maintaining evidence, and driving continuous improvement of the company's overall compliance posture.

In this role, you’ll help deliver the highest quality product while upholding our unwavering commitment to animal welfare, food safety, and responsible farming. You’ll act boldly, embrace continuous improvement, and partner with teammates and customers to deliver wins.

• Assist in the design, implementation, and maturation of the company's SOX compliance program.
• Support the identification and documentation of IT General Controls (ITGCs), automated controls, interfaces, and key reports.
• Partner with business and IT teams to develop and maintain control narratives, process documentation, and risk assessments.
• Monitor regulatory and compliance requirements and recommend improvements to compliance processes.
• Participate in risk assessments and control evaluations across business applications, infrastructure, and cloud environments.
• Support management's recurring SOX certification activities.
• Coordinate and execute periodic user access reviews for critical business applications and infrastructure platforms.
• Validate user provisioning, modifications, and deprovisioning activities to ensure compliance with established policies.
• Review segregation of duties (SoD) conflicts and work with application owners to remediate identified issues.
• Maintain evidence supporting access management controls and review results.
• Assist with implementation and monitoring of Identity and Access Management (IAM) controls and governance processes.
• Serve as a primary point of coordination for all IT audit requests.
• Collect, validate, organize, and retain all required audit evidence.
• Ensure evidence is complete, accurate, and reflects control execution requirements.
• Track audit requests, open findings, remediation activities, and status updates.
• Support walkthroughs, testing activities, and auditor inquiries.
• Maintain audit-ready documentation and repositories throughout the year.
• Assist in maintaining IT risk and control matrices (RCMs).
• Perform control monitoring activities and identify opportunities for process improvements.
• Support remediation efforts for control deficiencies, gaps, and audit findings.
• Help establish key compliance metrics and reporting mechanisms.
• Partner with IT teams to evaluate control impacts associated with system implementations, upgrades, and significant changes.
• Support the development and execution of enterprise-wide…