Z

Zoro

Online retail of industrial MRO equipment

Governance, Risk & Compliance Analyst

Internal Audit & ControlsConfirmed live in the last 24 hours
Full-timeChicago, IL, USA$78.9k - $131.6k

About the Job

Requirements

  • Familiarity with Governance, Risk & Compliance disciplines, including Business Continuity & Disaster Recovery, Incident Response, Third-Party Risk Management, SOX compliance, and technology risk management.
  • Knowledge of IT risk and control frameworks, including SOX IT requirements, COSO, COBIT, NIST Cybersecurity Framework, PCAOB, and PCI-DSS standards.
  • Understanding of IT General Controls, IT Application Controls, User Access Reviews, Segregation of Duties, and technology governance practices.
  • Experience coordinating cross-functional initiatives and building effective working relationships with business and technology stakeholders.
  • Experience working with cloud environments, enterprise applications, databases, and operating systems.
  • Strong organizational, analytical, and problem-solving skills, with the ability to manage multiple priorities simultaneously.
  • Ability to write clearly and communicate technical concepts effectively to technical and non-technical stakeholders across all levels of the organization.
  • Two to five years of experience in IT Audit, Governance, Risk & Compliance, Risk Management, Compliance, Cybersecurity, or Consulting (for example, Big Four or equivalent).

Responsibilities

  • Coordinate and continuously improve the Business Continuity and Disaster Recovery program by partnering with Grainger and cross-functional business and technology stakeholders to maintain Business Continuity Plans, Disaster Recovery plans, Business Impact Analyses, and annual plan refreshes.
  • Coordinate and facilitate business continuity and disaster recovery exercises, tabletop exercises, and recovery testing; document results, track action items, and drive continuous improvement across the Operational Resilience program.
  • Develop program metrics and identify opportunities to enhance organizational resilience beyond enterprise minimum requirements.
  • Maintain governance documentation supporting the Incident Response Program, coordinate annual reviews and updates, and facilitate incident response tabletop exercises.
  • Partner with stakeholders to coordinate post-incident remediation activities, track medium- and high-priority action items, and report on remediation status.
  • Support governance, risk, and compliance initiatives, including technology risk assessments, policy and standards development, audit readiness, and enterprise risk management activities.
  • Partner with business and technology teams to strengthen governance processes, maintain risk documentation, and promote continuous improvement across the GRC program.
  • Support expansion of the SOX program by onboarding new systems, applications, and business processes into SOX scope, coordinating design and implementation of new technology controls, and partnering with Grainger's Internal Controls organization on SOX governance activities.
  • Support the Third-Party Risk Management program by coordinating vendor risk assessments, SOC report reviews, remediation tracking, and ongoing monitoring of third-party technology risk.

Desired Qualifications

  • A bachelor's degree.
  • Relevant professional certifications such as CISA, CRISC, CISSP, or CIA.
  • Experience with compliance tools such as Auditboard (Optro), OneTrust, and Zilla Security, and productivity tools such as G-Suite, Lucidchart, Smartsheets, Slack, and Jira Board.

About the Company

Zoro

Online retail of industrial MRO equipment

Zoro.com serves business customers by operating an online retail platform for industrial equipment, MRO supplies, and tools. Products are sourced from multiple manufacturers and sold directly to end users through a user-friendly website, with detailed specifications and fast order processing. The platform works by offering a large catalog, competitive prices achieved through high-volume purchasing, and optional expedited shipping for an extra fee, enabling quick restocking and maintenance. Zoro differentiates itself with a broad selection, clear product information, and strong customer service aimed at keeping manufacturing, construction, healthcare, and education operations running smoothly. Its goal is to provide a convenient, cost-effective one-stop online source for MRO products, helping businesses save time and reduce procurement costs.

Company size
501-1,000
Company stage
Not listed
Total funding
Not listed
Headquarters
Canteleu, France
Founded
2011

Recently Posted Jobs

Explore more opportunities at Zoro

See more jobs