Governance, Risk & Compliance Analyst I

Duquesne Light Company, headquartered in downtown Pittsburgh, is a leader in providing electric energy and has been in the forefront of the electric energy market, with a history rooted in technological innovation and superior customer service. Today, the company continues its role as a leader in the transmission and distribution of electric energy, providing a secure supply of reliable power to more than half a million customers in southwestern Pennsylvania. 

 

Duquesne Light Company is committed to creating a culture of inclusion.  We value and respect the unique differences and experiences of our employees.   We believe that our differences lead to better collaboration, innovation and outcomes.  We want you to join our team!

 

Job Title: Governance, Risk & Compliance (GRC) Analyst I

 

Position Summary: The Governance, Risk & Compliance (GRC) Analyst I plays a key role in supporting and advancing the organization's information security, risk management, and regulatory compliance programs. This position is responsible for developing, maintaining, and enhancing IT governance processes, security controls, and compliance frameworks to ensure adherence to internal policies, industry standards, and regulatory requirements. The analyst collaborates with technology, business, risk, and compliance stakeholders to assess and mitigate risk, drive remediation activities, support audits, and promote a strong culture of security and compliance.

The GRC Analyst I monitors and reports on key security and compliance metrics, manages compliance deliverables such as risk assessments, documentation reviews, and ensures timely resolution of audit and review findings. The role also supports third-party risk management activities, provides risk-based guidance and consultation to business partners, and assists in the development of compliance strategies and process improvements. Additionally, the analyst serves as a trusted resource for operational teams by delivering training, guidance, and support to help ensure consistent execution of governance, risk, and compliance practices across the organization.

 

Location: Pittsburgh, PA (Hybrid)

 

Job Duties and Responsibilities:

• Develop, enhance and maintain information systems, platforms and IT operating compliance procedures and processes.
• Ensure timely completion of various Information Security compliance deliverables including: risk assessment, remediation, and compliance efforts including documentation reviews
• Monitor metrics that measure the IT and Information Security Framework
• Track and ensure adequate and timely resolutions to all audit/review issues relating to security.
• Assist with execution and tracking of the 3rd party vendor risk assessment program.
• Utilize analytical skills to assist in developing future strategies to resolve compliance issues.
• Prepare for and support compliance audits conducted by internal resources, consultants or regulatory organizations.
• Provide Information Security risk advisory and consultative services to internal customers, including IT, business, and risk and compliance stakeholders.
• Provide guidance to other operational staff, including training to new project managers and other employees in completion of compliance practices and procedures.

 

Additional Responsibilities:

• Perform other job-related duties as assigned
• Storm role duties as assigned

 

Education and Experience Required:

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or related discipline required.

• 2+ years of relevant experience required

 

Skills/Abilities:

• Excellent verbal and written communication skills
• Ability to work collaboratively within various levels of the Company and across all disciplines
• Ability to coordinate and prioritize multiple tasks
• Strong organizational skills
• Strong attention to detail

 

Scope

Responsibilities are generally tactical and basic in nature, however work may vary in type and complexity requiring the incumbent to be flexible to adjust to the given situation.  Primary focus is on daily deliverables and outputs, while at the same time developing a knowledge of the broader context in which the work is being performed.

 

Decision Impact

Independent discretion or decision-making capability is mostly limited.  Employees at this level follow a general framework of established boundaries to help them perform their roles and make decisions.  Decisions in situations that require deviation from this general framework are typically not made alone.  The employee may recommend a solution however the recommendations are frequently presented to their manager or more senior level professionals for review and approval prior to the decision being made.

 

Hybrid Work

Position follows our hybrid work model, with a minimum of two days working in the office and the remaining days working remotely. Reporting location and frequency may be subject to change based on job role and department needs. 

 

Storm Roles

All Non-Union Employees will serve in storm roles as appropriate to their role and skillset. Please be sure to discuss storm roles with the hiring manager for this position, as duties can vary across the Company. Examples of storm roles could include but aren't limited to duties such as: working with operations for service center support or with the communications, customer service or government affairs teams to respond to public and customer requests for information, etc. 

 

Data Governance

Utilize data to make business decisions as appropriate for the position, support data stewardship activities and partner with IT on underlying data needs.

EQUAL OPPORTUNITY EMPLOYER
Duquesne Light Holdings is committed to providing equal employment opportunity to all people in all aspects of the employment relationship, without discrimination because of race, age, sex, color, religion, national origin, disability, sexual orientation and gender identity or status as a Vietnam era or special disabled veteran or any other unlawful basis, as defined by applicable law, and fostering a workplace free of unlawful discrimination and retaliation. This policy affects decisions including, but not limited to, hiring, compensation, benefits, terms and conditions of employment, opportunities for promotion, transfer, layoffs, return from a layoff, training and development, and other privileges of employment. An integral part of Duquesne Light Holdings' commitment is to comply with all applicable federal, state and local laws concerning equal employment and affirmative action.

Duquesne Light Holdings is committed to offering an inclusive and accessible experience for all job seekers, including individuals with disabilities. Our goal is to foster an inclusive and accessible workplace where everyone has the opportunity to be successful.

If you need a reasonable accommodation to search for a job opening, apply for a position, or participate in the interview process, connect with us at [email protected] and describe the specific accommodation requested for a disability-related limitation.