Senior Analyst, GRC
Job description
About the role
The Senior Analyst, GRC operationalizes governance, risk, and compliance to protect people and their pets. This role partners with technology, clinical, and business teams to sustain a compliant, audit-ready environment across the organization. Success is defined by the candidate's ability to shift from hands-on assurance toward program ownership and strategic influence. The hire will translate complex risk data into clear actions that enable fast-moving care delivery. They will serve as the primary link between technical controls and business decision-making. The role demands business curiosity paired with technical rigor to explain what changed and why it matters. Most of the work will involve owning recurring reports and assurance artifacts while driving continuous improvement. The ultimate goal is to strengthen the reliability of operations that keep veterinary practices running safely every day.
Key facts
What you'll do
Using intake and triage, assess vendors and AI tools and move remediation toward closure through tracked actions.
Update policies, standards, and baselines while documenting exceptions to ensure consistent application across teams.
Track and manage exceptions in a structured way so that risk owners understand required outcomes and timelines.
Leverage a GRC or governance platform such as Hyperproof, Archer, or OneTrust to centralize evidence and control documentation.
Perform analysis on operational data to identify trends, gaps, and opportunities for improved control effectiveness.
Translate technical and regulatory requirements into clear documentation that non-technical stakeholders can use.
Conduct testing and sampling activities to validate that controls are operating as intended in production environments.
Coordinate with technology, clinical, and legal functions to align on risk treatment plans and regulatory obligations.
Monitor changes in regulations and industry standards to recommend updates to policies and control frameworks.
Present findings and recommendations clearly to leadership so that informed decisions can be made quickly and confidently.
Support audit preparation and responses by maintaining an organized, up-to-date library of evidence and artifacts.
Requirements
Three or more years in GRC, IT audit, compliance, or a related security function is required for this role.
Knowledge of a security or compliance framework such as PCI DSS, NIST, SOC 2, or ISO 27001 is required.
Hands-on experience with a GRC or governance platform such as Hyperproof, Archer, or OneTrust is required.
The ability to pick up a new GRC or governance platform quickly must be demonstrated if direct experience is not present.
Documentation skills and a sharp eye for detail are required in all aspects of the work.
Clear written communication is required to produce reports, exceptions, and policy updates.
The ability to follow through on tasks without reminders is required to keep the program on track.
A Bachelor's degree is required as a minimum educational qualification.
Candidates must be located near VEG Headquarters in White Plains, NY for this role.
Full-time engagement is required, and availability during standard business hours is necessary.
Nice to have
Experience working in a 24/7 healthcare or veterinary environment is preferred.
Familiarity with risk and compliance practices that support fast-moving product and care delivery.
Understanding of how modern tools and structured frameworks are used to manage controls and evidence.
Background collaborating across technology, clinical, and legal functions.
Demonstrated commitment to continuous learning and professional growth.
Practical notes
Typical interview steps
Analyst interviews often include a SQL or spreadsheet exercise, a case question, and behavioral rounds. Candidates may be asked to analyze a dataset, define a metric, or estimate an outcome. Presenting findings clearly is tested as often as the analysis itself. Interviewers often test speed and clarity with a timed exercise. Explaining what the numbers mean, not just what they are, is the differentiator.
Questions to ask
Worth asking in any interview: how the team measures success, who the role works with daily, what the onboarding looks like, and what the company is trying to achieve this year. Asking what past hires did well is a strong final question. Keep the list short and pick the questions that matter most to you.
Career growth
Analyst careers can grow into senior analyst, analytics manager, or data science roles. Some analysts move into product or business operations. Deeper technical skills or broader business ownership are the two main paths. Analyst roles are a common on-ramp into product, marketing, or operations leadership. Building deep domain knowledge alongside analytics is the fastest path.