Staff Risk & Compliance Analyst at GE Vernova
India
<h1><span class="emphasis-3"><b><b><b>Job Description Summary</b></b></b></span></h1>Looking to make a global impact and solve problems? <br><br>Through relentless innovation and continuous collaboration with our customers, GE Gas Power, part of GE Vernova, is providing more advanced, cleaner, and efficient power that people depend on today and building the energy technologies of the future. <br><br>What impact you’ll make:<br><br>As a Staff Risk & Compliance Analyst in the Power IT GRC function, you will support day-to-day IT GRC activities that contribute to the Power segment's SOX assurance, assist in advancing the multi-year control rationalization and automation roadmap with clear KPIs/KRIs, and develop your expertise in governance, risk, and compliance.<p style="text-align:inherit"></p><p style="text-align:inherit"></p><p style="text-align:inherit"></p><h1><span class="emphasis-3"><b>Job Description</b></span></h1><p><span style="color:#ff0000"><span style="font-size:14px"><span style="overflow-wrap: break-word; display: inline; text-decoration: inherit; hyphens: auto;">· </span> </span></span><b><span style="font-size:14px">Support governance framework</span></b><span style="font-size:14px">: Assist in maintaining the IT governance structure using established frameworks; help update documentation, track process adherence, and support standardization efforts under senior guidance.</span></p><p><span style="color:#ff0000"><span style="font-size:14px"><span style="overflow-wrap: break-word; display: inline; text-decoration: inherit; hyphens: auto;">· </span> </span></span><b><span style="font-size:14px">SOX Compliance Management: </span></b><span style="font-size:14px">Support the Power DT Sarbanes-Oxley compliance program by coordinating testing activities, managing documentation requirements, and ensuring timely completion of control assessments. Collaborate with process owners to maintain accurate control narratives, risk-control matrices, and test evidence in accordance with SOX requirements. Track testing cycles, identify control gaps or weaknesses, and facilitate management's remediation efforts. Prepare SOX status reports for leadership and external auditors, maintain the SOX controls repository, and stay current on regulatory changes and industry best practices to ensure continuous compliance with financial reporting requirements.</span></p><p><span style="color:#ff0000"><span style="font-size:14px"><span style="overflow-wrap: break-word; display: inline; text-decoration: inherit; hyphens: auto;">· </span> </span></span><b><span style="font-size:14px">End-to-End Deficiency Management</span></b><span style="font-size:14px">: Lead comprehensive deficiency identification, tracking, and resolution processes across all GRC domains. Collaborate with control owners and business stakeholders to document findings, assign remediation actions with clear deadlines, and monitor progress through to closure. Maintain deficiency registers, provide regular status reporting to leadership, perform root cause analysis, and ensure timely escalation of overdue or high-risk items. Drive continuous improvement by analyzing deficiency trends and recommending preventive measures to strengthen the organization's control environment.</span></p><p><span style="color:#ff0000"><span style="font-size:14px"><span style="overflow-wrap: break-word; display: inline; text-decoration: inherit; hyphens: auto;">· </span></span></span><b><span style="font-size:14px">Support key control domains</span></b><span style="font-size:14px">: Assist in ERP control areas (Identity and Access <span style="overflow-wrap: break-word; display: inline; text-decoration: inherit; hyphens: auto;">Management/Privileged</span> Access, SDLC/DevOps change, and IT operations) by performing routine control testing, maintaining evidence files, and supporting standardization initiatives.</span></p><p><span style="color:#ff0000"><span style="font-size:14px"><span style="overflow-wrap: break-word; display: inline; text-decoration: inherit; hyphens: auto;">· </span> </span></span><b><span style="font-size:14px">Support policy development</span></b><span style="font-size:14px">: Assist in drafting and updating IT policies and procedures for security, data management, and access control; help coordinate review processes, track acknowledgments, and maintain policy repositories to support continuous compliance.</span></p><p><span style="color:#ff0000"><span style="font-size:14px"><span style="overflow-wrap: break-word; display: inline; text-decoration: inherit; hyphens: auto;">· </span> </span></span><b><span style="font-size:14px">Support risk management</span></b><span style="font-size:14px">: Assist in risk assessment activities by gathering data, documenting findings, and maintaining risk registers; help identify and document risks associated with IT systems, including cybersecurity threats and data breaches, under senior supervision.</span></p><p><span style="color:#ff0000"><span style="font-size:14px"><span style="overflow-wrap: break-word; display: inline; text-decoration: inherit; hyphens: auto;">· </span> </span></span><b><span style="font-size:14px">Support compliance audits</span></b><span style="font-size:14px">: Serve as a key support resource for internal and external audits; assist in managing request lists, gathering evidence, organizing documentation, responding to routine inquiries, and tracking remediation progress for identified control deficiencies.</span></p><p><span style="color:#ff0000"><span style="font-size:14px"><span style="overflow-wrap: break-word; display: inline; text-decoration: inherit; hyphens: auto;">· </span> </span></span><b><span style="font-size:14px">Monitor regulatory adherence</span></b><span style="font-size:14px">: Help monitor changes in regulations and laws, such as SOX, NIS2, and GDPR; assist in maintaining control and policy mappings and support updates to ensure ongoing compliance.</span></p><p><span style="color:#ff0000"><span style="font-size:14px"><span style="overflow-wrap: break-word; display: inline; text-decoration: inherit; hyphens: auto;">· </span> </span></span><b><span style="font-size:14px">Support training and awareness</span></b><span style="font-size:14px">: Assist in developing training materials and coordinating training sessions for employees and stakeholders; help track participation and gather feedback to support understanding of compliance obligations and best practices.</span></p><p><span style="color:#ff0000"><span style="font-size:14px"><span style="overflow-wrap: break-word; display: inline; text-decoration: inherit; hyphens: auto;">· </span> </span></span><b><span style="font-size:14px">Support reporting</span></b><span style="font-size:14px">: Assist in building and maintaining reports and dashboards for senior management on IT risk posture, compliance status, and control effectiveness; help gather data, validate information, and prepare routine status updates.</span></p><p><b><span style="font-size:14px"> </span></b></p><p><b><span style="font-size:14px"> </span></b></p><p style="text-align:inherit"></p><p style="text-align:inherit"></p><h1><span class="emphasis-3"><b><b><b>Additional Information</b></b></b></span></h1><div><div><div><div><div><div><div><p style="text-align:left"><b>Relocation Assistance Provided: </b>No</p><p style="text-align:inherit"></p><p style="text-align:inherit"></p><p style="text-align:inherit"></p><p style="text-align:inherit"></p><p style="text-align:inherit"></p><p style="text-align:inherit"></p><p style="text-align:inherit"></p><p style="text-align:inherit"></p></div></div></div></div></div></div></div>#LI-Remote - This is a remote position<p></p><p></p>
Apply Now
