IT Governance, Risk, and Compliance Analyst

• Job Type
• Full-time
• Description

Healthy Hens, Healthy Eggs, Heathy Planet

At Pete & Gerry's, we were first to do it better, and are still doing it best.

For nearly 30 years, we've been on a mission to produce healthy, delicious eggs and partner with family farms for meaningful impact.

By raising hens outdoors as nature intended, we stay true to our roots every step of the way by keeping animal welfare, planet-friendly farming practices, and high-quality taste and nutrition at the heart of all we do, so you can always believe in what you buy.

Healthy Together

At Pete & Gerry’s, we believe that when we care for each other, we all thrive.

Across our farms, offices, and communities, we act as one flock — united by respect, collaboration, and a shared commitment to doing what’s right.

We create an environment where every person feels valued, supported, and empowered to grow, because our success depends on the wellbeing of the people who make our mission possible.

The Role At a Glance

The IT Governance, Risk, and Compliance (IT GRC) Compliance Analyst is responsible for supporting the development, implementation, and ongoing management of the organization's IT compliance and SOX control program.

This role is a blend of both strategic and tactical work.

This role works closely with IT, Finance, Audit and business stakeholders to ensure that IT General Controls (ITGCs), application controls, and compliance processes are operating effectively and supporting the organization's regulatory requirements.

The IT GRC Compliance Analyst serves as a key contributor in building a sustainable compliance framework, coordinating audit activities, performing user access reviews, gathering and maintaining evidence, and driving continuous improvement of the company's overall compliance posture.

How You’ll Create Greater Impact

In this role, you’ll help deliver the highest quality product while upholding our unwavering commitment to animal welfare, food safety, and responsible farming.

You’ll act boldly, embrace continuous improvement, and partner with teammates and customers to deliver wins.

• Assist in the design, implementation, and maturation of the company's SOX compliance program.
• Support the identification and documentation of IT General Controls (ITGCs), automated controls, interfaces, and key reports.
• Partner with business and IT teams to develop and maintain control narratives, process documentation, and risk assessments.
• Monitor regulatory and compliance requirements and recommend improvements to compliance processes.
• Participate in risk assessments and control evaluations across business applications, infrastructure, and cloud environments.
• Support management's recurring SOX certification activities.
• Coordinate and execute periodic user access reviews for critical business applications and infrastructure platforms.
• Validate user provisioning, modifications, and deprovisioning activities to ensure compliance with established policies.
• Review segregation of duties (So D) conflicts and work with application owners to remediate identified issues.
• Maintain evidence supporting access management controls and review results.
• Assist with implementation and monitoring of Identity and Access Management (IAM) controls and governance processes.
• Serve as a primary point of coordination for all IT audit requests.
• Collect, validate, organize, and retain all required audit evidence.
• Ensure evidence is complete, accurate, and reflects control execution requirements.
• Track audit requests, open findings, remediation activities, and status updates.
• Support walkthroughs, testing activities, and auditor inquiries.
• Maintain audit-ready documentation and repositories throughout the year.
• Assist in maintaining IT risk and control matrices (RCMs).
• Perform control monitoring activities and identify opportunities for process improvements.
• Support remediation efforts for control deficiencies, gaps, and audit findings.
• Help establish key compliance metrics and reporting mechanisms.
• Partner with IT teams to evaluate control impacts associated with system implementations, upgrades, and significant changes.
• Support the development and execution of enterprise-wide compliance strategy initiatives.
• Promote compliance awareness and best practices across IT and business functions.
• Assist in developing policies, standards, procedures, and training materials.
• Contribute to compliance automation and continuous monitoring initiatives.
• Recommend improvements that enhance control effectiveness, operational efficiency, and audit readiness.
• What You’ll Bring To The Flock
• Bachelor's degree in Information Systems, Accounting, Business Administration, Cybersecurity or related field.
• 2-5 years of experience in IT Audit, IT Compliance, IT Risk Management, SOX Compliance, or Governance, Risk & Compliance.
• Working knowledge of SOX Section 404 and IT General Controls framework (ITGCs).
• Experience with control testing and audit evidence.
• Strong documentation and analytical skills.
• Experience performing user access reviews and access governance activities.
• Understanding of access management, change management, system development lifecycle, and computer operations controls.
• Strong organizational skills with the ability to manage multiple audit and compliance activities simultaneously.
• Excellent written and verbal communication skills with both technical and non-technical stakeholders.
• Advanced proficiency in Microsoft Excel, Word, and Power Point.
• Experience within a Consumer Packaged Goods (CPG), Manufacturing, Distribution, or Retail organization.
• Experience with ERP platforms such as Microsoft Dynamics Business Central, SAP, Oracle, or similar systems.
• Familiarity with Fast Path\Delinea and Flo Qast So D and compliance platforms.
• Experience supporting cloud environments including Microsoft Azure and Microsoft 365.

• Professional certifications such as

• CISA (Certified Information Systems Auditor)
• CRISC (Certified in Risk and Information Systems Control)
• CIA (Certified Internal Auditor)
• CISSP (Certified Information Systems Security Professional)
• Work Schedule & Hours
• Day Shift: Monday through Friday
• Shifts are typically 8 hours per day, depending on operational needs.
• Start and end times may vary
• Flexibility is required, as schedules may be adjusted to support business operations.
• Tending To Our Flock
• Medical, dental, and vision insurance through Anthem Blue Cross Blue Shield and Humana
• Paid vacation
• Paid sick time
• Paid volunteer time
• 9 paid holidays
• 401(k) with 4% employer match
• Disability and life insurance
• Opportunities for advancement
• Maternity and paternity leave
• Tuition reimbursement
• Flexible Spending Account
• Footwear reimbursement for onsite employees
• Onsite employees receive free eggs weekly; remote employees receive coupons for free eggs
• Breakfast or lunch events from time to time.
• A team grounded in a shared mission: Healthy Hens, Healthy Eggs, Healthy Planet.
• Equal Opportunity Statement

Pete & Gerry’s Organics is an Equal Opportunity Employer.

We are a community built on respect and shared purpose.

Every person belongs here — because our strength comes from the diversity of people and perspectives that make us who we are.

We are an E-Verify employer.

After accepting an offer, we will use E-Verify to confirm your eligibility to work in the United States by comparing information from your Form I-9 with records from the U.

Department of Homeland Security and Social Security Administration.

#J-18808-Ljbffr