Job Description: The Governance, Risk, & Compliance Analyst is responsible for contributing to our organization’s compliance with regulatory requirements, such as PCI DSS, NIST. This person will be responsible for coordinating with company management and functional teams to identify potential risks, implementing policies/procedures, and monitoring the company’s adherence to those policies and procedures. Responsibilities: • Aid in the implementation and adoption of internal policies; communicate with stakeholders, ensuring awareness of necessary actions to comply with internal policy and regulatory requirements. • Identify areas of risk concerning the organization’s compliance and report to the Senior Manager of Governance, Risk, & Compliance. • Identification of non-compliant technical or operational conditions. • Definition and communication of potential solutions to non-compliant conditions. • Assist in the management of external assessments. • Perform risk assessments/gap analysis for projects based on their compliance obligations. • Collaborate with Product and Engineering teams to help understand the technical approach that will allow us to maintain compliance. Qualifications: • Bachelor’s degree in technology or similar experience preferred. • 2 years of demonstrated experience in Compliance, information assurance or cybersecurity with regulatory requirements. • Familiarity with other common cybersecurity controls frameworks (SOC2, ISO) • Excellent written and verbal communication skills Working at RaceTrac Petroleum, Inc. (RPI) will surprise you! We are more than just a convenience store business. RPI is made up of four operating divisions: RaceTrac, RaceWay, Metroplex Energy, and Energy Dispatch. While there are many different teams that keep our business running each day, we can guarantee you a few things if you join one of our teams- we never stop learning and we are constantly innovating, improving, and trying new things. There is never a dull day. Apply today to join in on the fun!