Senior Governance and Compliance Analyst at Deluxe Corporation (Shoreview, MN)

You can feel the energy at the Deluxe family of companies! The creative environment and the sense of possibility here are what you'd expect at a start-up, yet, we offer all the resources and strength of a well-established, publicly traded company.

The Sr. Governance Analyst will provide and effectively support the business with changes in the internal business environment (e.g. employees, business relationships, operational risks, IT, third parties, mergers, and acquisitions) as well as the external environment (e.g. external risks, industry developments, market and economic factors, and changing laws and regulations)

Accountabilities
- Work with a variety of business partners and stakeholders for the Compliance by Design (CbD) Program to ensure projects builds in requirements to meets or maintains compliance with information security policies and standards.
- Performs Third Party Service Provider assessments and monitoring
- Identify requirements and considerations for information security, operational risk management and compliance for changes in the organization
- Works with technical experts to assess technical and administrative information security controls for meeting compliance requirements
- Provide guidance to project teams on data governance requirements (PCI DSS; SOX, various banking and privacy regulations)
- Define requirements, document and implement the necessary strategies, policies, standards and procedures for the Governance, Risk and Compliance Programs
- Support security initiatives and the overall security compliance strategy with recommendations for appropriate policies, standards and procedures. 
- Creates and maintains Information Security Policies, Standards and Procedures.
- Assists in the exception to policy process to analyze non-conformance requests, mitigate info security risks and provide guidance
- Supports client, independent and internal audits of Governance, Risk and Compliance Programs
- Works with the business liaison and key stakeholders (legal, sourcing, privacy) to mutually acceptable agreements.
- Maintains metrics and reporting on the GRC programs