Apply on Employer Site

Lee Enterprises · 3 months ago

Junior Governance, Risk & Compliance Analyst

Davenport, IA, USA

Full-time

Onsite

New Grad, Entry Level

$20/hr - $20/hr

Lee Enterprises is seeking a motivated Junior GRC Analyst to join our growing Governance, Risk & Compliance (GRC) team. This part-time, developmental position offers an opportunity to gain direct exposure to enterprise risk management, compliance, and governance initiatives in a fast-paced, collaborative environment.

NewsPublishing

Responsibilities

Assist in identifying, assessing, and tracking risks across IT and enterprise functions

Support maintenance of the enterprise risk register and dashboards used by leadership

Help draft, organize, and maintain policies, standards, and procedures

Support compliance awareness campaigns and training that promote a culture of risk accountability

Learn and assist in mapping controls to frameworks such as NIST CSF, COBIT 2019, and ISO 27001

Support tracking and validation of control effectiveness through GRC tools or reports

Partner with GRC leadership to prepare reports, metrics, and presentations for management

Contribute to meetings with stakeholders across Legal, Finance, IT, and Operations

Provide day-to-day administrative and research assistance to the GRC team

Demonstrate initiative, curiosity, and a commitment to learning risk and compliance fundamentals

Qualification

NISTCOBITISO 27001GRC toolsRisk managementAnalytical mindsetDesire to learnWritten communicationProblem-solvingTeam collaboration

Required

Strong organizational and written communication skills

Detail-oriented with an analytical mindset and ability to problem-solve

Interest in learning frameworks such as NIST, COBIT, ISO 27001, or SOC 2

Desire to learn, hunger to achieve, and persistence to accomplish

Preferred

Internship experience in governance, risk, compliance, audit, or related disciplines (internships and academic experience welcome)

Bachelor's degree (completed or in progress) in Information Security, Risk Management, Business Administration, or a related field — or equivalent experience

Experience supporting policy writing, audits, or risk assessments

Exposure to GRC tools or risk management platforms

Familiarity with cybersecurity, data protection, or IT operations concepts

Relevant certifications (e.g., Security+, CISA, CISM, CGRC) are a plus