Senior Risk and Compliance Analyst

Constellation Brands
Chicago, San Antonio
Workplace: OnsiteFull timeUSD 96,700 - 148,100 annuallyFunction: Legal, Risk & ComplianceExperience: 4+ yearsEducation: bachelorsSkills: ["Ownership","Self-direction","Thought leadership","Stakeholder management","Process analysis","Communication"]

Support and mature the organization’s IT governance, risk, and compliance (GRC) and IT third-party risk management (TPRM) programs. Lead vendor risk assessments, due diligence, ongoing monitoring, remediation tracking, and risk intake/escalation. Partner across IT, Information Security, Procurement, Legal, OT, and the business to evaluate third parties, review security evidence (e.g., SOC/ISO), develop risk metrics/KRIs/KPIs, and drive GRC automation and continuous improvement.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Constellation Brands
Constellation Brands
1 day ago

Senior Risk and Compliance Analyst

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 5 hours agoStatus: Live

Job Summary

Support and mature the organization’s IT governance, risk, and compliance (GRC) and IT third-party risk management (TPRM) programs. Lead vendor risk assessments, due diligence, ongoing monitoring, remediation tracking, and risk intake/escalation. Partner across IT, Information Security, Procurement, Legal, OT, and the business to evaluate third parties, review security evidence (e.g., SOC/ISO), develop risk metrics/KRIs/KPIs, and drive GRC automation and continuous improvement.
Location: Chicago, San Antonio
Workplace: Onsite
Employment Type: Full time
Job Function: Legal, Risk & Compliance

Key Responsibilities

  • •Advise IT GRC stakeholders and advance strategic GRC initiatives.
  • •Lead and enhance the IT third-party risk management program, including vendor risk assessments, onboarding, monitoring, and remediation.
  • •Evaluate third-party vendors, applications, and services with partners across Information Security, IT, Procurement, Legal, and the business.
  • •Review third-party security documentation (e.g., SOC reports, ISO certifications, security questionnaires) to assess control maturity and residual risk.
  • •Support risk intake/workflow, maintain the IT risk register and escalation of technology risks, and develop automated/manual metrics (KRIs/KPIs).
Travel: High travel

Pay and Benefits

Salary: USD 96,700 - 148,100 annually
Perks:Paid LeaveHealth InsuranceDentalVision401k

Key Requirements

  • •4+ years of experience in Information Security, Risk Management, Audit, IT Governance, IT Compliance, or a related discipline.
  • •Lead and mature an IT Third-Party Risk Management (TPRM) program, including governance, risk assessments, and continuous improvement.
  • •Strong understanding of third-party risk management across the vendor lifecycle (due diligence, onboarding, ongoing monitoring, remediation, and offboarding).
  • •Broad generalist understanding of information security risk and compliance across risk, audit, policy, and third-party risk.
  • •Working knowledge of industry frameworks and regulatory requirements, including NIST, ISO, CIS, PCI-DSS, SOX, GDPR, CCPA, and HIPAA.
Experience:4+ yearsInformation securityRisk managementAuditIT governanceThird-party risk managementGRC
Education:Bachelor's
Skills:OwnershipSelf-directionThought leadershipStakeholder managementProcess analysisCommunication
Certifications:CRISCCISSPCISACISMCGEITGCCCGSECGISP
Tech Stack:NISTISOCISPCI-DSSSOXGDPRCCPAHIPAASOC reportsISO certificationsLogicGateOptroOneTrustWorkivaMicrosoft ExcelMicrosoft WordMicrosoft PowerPointSOC

Company Brief

Constellation Brands
Produces, markets, and distributes beer, wine, and spirits brands across North America and internationally, including major labels and craft offerings, serving retail, on-premise, and e-commerce channels.
Industry: Food & Beverage
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: Victor, United States
Founded: 1945
WebsiteLinkedIn