Governance, Risk & Compliance (GRC) Analyst

About Zoro Tools, Parts, and Supplies for Your Business™ Zoro has the tools, parts, and supplies your business needs to get the job done—all at affordable prices. Shop millions of products for every industry, from manufacturing and construction to plumbing, electrical, and more. We partner with thousands of distributors across the U.S. to deliver the items your business needs with fast, free shipping and friendly customer service. Considering a career with Zoro? Take the first step by exploring our open roles.

Zoro

Tools, Parts, and Supplies for Your Business™

ecommercesmall business suppliesindustrial supplieselectrical & lightingoffice suppliescleaning suppliesplumbing suppliesauto & truck suppliespower toolshand tools

Z

bit.ly/3NEKfNb

501-1,000 employees

Retail Office Equipment

Chicago, Illinois

2011

Public Company

23k LinkedIn followers

• The Governance, Risk & Compliance (GRC) Analyst supports the development,
• execution, and continuous improvement of Zoro's Governance, Risk & Compliance
• program with a primary focus on Operational Resilience, including Business
• Continuity, Disaster Recovery, and Incident Response governance. The role also
• supports broader GRC initiatives including SOX compliance, third-party risk
• management, technology risk assessments, and audit readiness.
• Coordinate and continuously improve Zoro's Business Continuity and Disaster
• Recovery (BCDR) program by partnering with Grainger and cross-functional
• business and technology stakeholders to maintain Business Continuity Plans
• (BCPs), Disaster Recovery (DR) plans, Business Impact Analyses (BIAs), and
• annual plan refreshes.
• Coordinate and facilitate business continuity and disaster recovery
• exercises, tabletop exercises, and recovery testing while documenting
• results, tracking action items, and driving continuous improvement across the
• Operational Resilience program.
• Develop program metrics and identify opportunities to enhance organizational
• resilience beyond enterprise minimum requirements.
• Maintain governance documentation supporting Zoro's Incident Response Program
• (IRP), coordinate annual reviews and updates, and facilitate incident
• response tabletop exercises.
• Partner with stakeholders to coordinate post-incident remediation activities,
• track medium- and high-priority action items, and report on remediation
• status.
• Support governance, risk, and compliance initiatives including technology
• risk assessments, policy and standards development, audit readiness, and
• enterprise risk management activities.
• Partner with business and technology teams to strengthen governance
• processes, maintain risk documentation, and promote continuous improvement
• across the GRC program.
• Support expansion of Zoro's SOX program by onboarding new systems,
• applications, and business processes into SOX scope, coordinating design and
• implementation of new technology controls, and partnering with Grainger's
• Internal Controls organization on SOX governance activities.
• Support Zoro's Third-Party Risk Management (TPRM) program by coordinating
• vendor risk assessments, SOC report reviews, remediation tracking, and
• ongoing monitoring of third-party technology risk.

Required

• Business Continuity & Disaster Recovery (BCDR), Incident Response,
• Third-Party Risk Management (TPRM), SOX compliance, and technology risk
• management.
• Knowledge of IT risk and control frameworks, including SOX IT requirements,
• standards.
• Understanding of IT General Controls (ITGCs), IT Application Controls
• (ITACs), User Access Reviews (UARs), Segregation of Duties (SoD), and
• technology governance practices.
• Experience coordinating cross-functional initiatives and building effective
• working relationships with business and technology stakeholders.
• Experience working with cloud environments, enterprise applications,
• databases, and operating systems.
• Strong organizational, analytical, and problem-solving skills with the
• ability to manage multiple priorities simultaneously.
• Ability to write clearly and communicate technical concepts effectively to
• both technical and non-technical stakeholders across all levels of the
• organization.
• Bachelor's degree preferred.
• 2–5 years of experience in IT Audit, Governance, Risk & Compliance, Risk
• equivalent).
• Relevant professional certifications such as CISA, CRISC, CISSP, or CIA are
• preferred.
• Positive self-starter with a strong attention to detail and a continuous
• improvement mindset.

Preferred

• Experience with Compliance Tools (e.g. Auditboard (Optro), OneTrust, Zilla
• Security) and productivity tools (e.g. G-Suite, Lucidchart, Smartsheets,
• Zoro’s total compensation plan includes our Zoro Incentive Plan (ZIP) that is
• designed to foster and reward our team members for strong performance. Total
• compensation will be highly competitive.
• In addition to competitive compensation, Zoro offers comprehensive benefits and

• Medical, dental, vision, and life insurance plans with coverage starting on
• day one of employment
• Maternity support programs, nursing benefits, and up to 14 weeks paid leave
• for birth parents and up to 4 weeks paid leave for non-birth parents. We also
• support growing your family through access to adoption assistance program
• 6 free sessions each year with a licensed therapist and Wellhub portal
• membership to support your mental and emotional wellbeing
• At least 18 paid time off days annually for full-time employees and 6 company
• holidays per year
• 6% company contribution to a 401K Retirement Savings Plan each pay period, no
• employee contribution required
• Tuition reimbursement, student loan refinancing and access to financial
• counseling, education, and tools
• Charitable Gift Program - match gift to an eligible educational, cultural,
• community health, and human service organizations
• Employee discounts and admission to various civic and cultural institutions
• around Chicago
• Zoro office perks including coffee bar, beer on tap, unlimited snacks, access
• to the onsite gym, and incredible city skyline views
• For additional information and details regarding our benefits and our parent
• company, W. W. Grainger, please click on the link here
• The pay range provided is not a guarantee of compensation. The range listed
• reflects the expected base pay for this position at the time of posting, based
• on the role's job grade. Actual compensation may vary depending on factors such
• as location, relevant experience and individual qualifications.
• Illinois
• $78,900—$131,600 USD