WM · 11 hours ago
Senior Analyst, IT GRC
Waste Management (WM) is the leading provider of comprehensive waste and environmental services in North America. They are seeking a Senior Analyst for IT Governance, Risk, and Compliance to support the Technology Risk program and ensure strong security controls within the organization.
EnergyEnvironmental EngineeringRecyclingSustainabilityWaste Management
Responsibilities
IT Risk Management: Drive risk identification, assessment, and mitigation of cybersecurity, technology, and data risks while staying up-to-date on changes in regulations, best practices, emerging technologies, and company-specific M&A activity and strategy that could impact the organization's IT governance, risk, and compliance posture
Continuous Monitoring: Drive company-wide implementation and adoption of continuous monitoring technology and tools to improve overall adequacy, quality and efficacy of controls
Policy Governance: Create and maintain policies and standards, in collaboration with stakeholders and drive company-wide implementation and adoption
Compliance Management: Evaluate and support enterprise compliance against various regulatory requirements such as SOX, PCI, GDPR, as well as company policies. Provide reporting to leadership on issues identified, ongoing mitigation efforts and timing to execute, and formalize management risk acceptance where applicable
Security and Awareness Training: Promote a culture of cybersecurity awareness across the organization through risk assessments, monthly phishing and security training and awareness campaigns, giving leadership visibility into the effectiveness of training programs
Qualification
Required
Bachelor's degree (accredited) in Computer Science, MIS, Business Administration or similar area of study, or in lieu of degree, High School Diploma or GED (accredited) and 4 years or relevant work experience
Five years of relevant work experience (in addition to education requirement)
Must possess one of the following or will obtain one within the next 12 months: Certified Information Systems Security Professional (CISSP), Certified in Risk and Information Security Control (CRISC), Certified Information Security Manager (CISM)
Advanced knowledge or skills in one or more of the following: Experience in the areas of change control, problem management, incident management troubleshooting security solutions
Technical understanding and awareness to security best practices to be implemented for modern systems such as Oracle ERP, AWS, and other agentic/AI/ML solutions
Ability to produce clear and actionable security reports and dashboards for stakeholders
Strong verbal and written communication skills to work with cross-functional teams
Preferred
Other professional certifications desired include: CCSP, CISA
Benefits
Medical
Dental
Vision
Life Insurance
Short Term Disability
Stock Purchase Plan
Company match on 401K
Paid Vacation
Holidays
Personal Days
Company
WM
WM is North America's leading provider of integrated environmental solutions.
H1B Sponsorship
WM has a track record of offering H1B sponsorships. Please note that this does not
guarantee sponsorship for this specific role. Below presents additional info for your
reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (1)
2023 (3)
2022 (3)
2020 (4)
Funding
Current Stage
Public CompanyTotal Funding
$9.95B2024-10-31Post Ipo Debt· $5.2B
2024-06-24Post Ipo Debt· $1.5B
2023-07-27Post Ipo Debt· $2B
Recent News
Arkansas Business — Business News, Real Estate, Law, Construction
2025-12-22
Company data provided by crunchbase