Risk & Compliance Analyst

Requisition ID # 155960 

Job Category: Compliance / Risk / Quality Assurance 

Job Level: Individual Contributor

Business Unit: Gen Counsel, Ethics, Risk & Compliance

Work Type: Hybrid

Job Location: Oakland

Department Overview
The Information & Records Governance  organization advances the company’s records and information management program maturity through implementation of compliant, efficient, and systematic controls for the creation, receipt, maintenance, use, and disposition of records. Information & Records Governance is responsible for transforming PG&E’s records and information asset management practices to ensure compliance with laws and regulations, and to promote safe and effective business operations. Information & Records Governance develops policy, strategy and guidance for records and information assets, monitors compliance and supports consistent and integrated processes that promote responsible management of the information lifecycle consistent with regulatory, legal and operational requirements.

Position Summary
Manage and help to provide assurance over enterprise Risk and Compliance programs, procedures and systems for records and information management. Act in a consultative capacity as a business partner and Risk and Compliance expert to support functional areas, as needed. Responsible for understanding the business environment and associated risks and compliance requirements for records and information management, identifying and assessing  enterprise compliance requirements and operational risks, helping requirement owners develop controls and metrics and evaluate for effectiveness, evaluating control deficiencies, supporting the design of mitigating activities, and helping to facilitate and publish policies and standards, in line with compliance objectives and/or established risk management protocols. Provide an infrastructure that enables business units, departments and employees 1) to conduct business in compliance with applicable laws, regulations and policies; and 2) identify, manage and mitigate operational risks. Act as an advocate for, help train and engage employees and leaders throughout line of business in risk and compliance to ensure understanding of compliance requirements, risk management principles and other needed items to support organization-wide awareness and facilitate enterprise behaviors related to risk and compliance. 

Major areas of responsibility typically include the following: 

Compliance Management: Lead, implement, facilitate and provide assurance over enterprise-wide compliance program to meet compliance requirements. Understand and document State, Federal and local compliance obligations and associated controls and business processes. Complete or coordinate compliance validation activities and control effectiveness testing activities. Assess and analyze regulatory requirement issues to determine impact and remediation efforts. Assess compliance risk and design control risk mitigation plans, and support business implementation. Track and report key compliance metrics. 

Risk Management: Implement risk management program activities in support of the PG&E’s enterprise-wide risk management program. Work closely with risk owners to identify, assess and analyze operational and enterprise risks, facilitate the creation of risk response plans (and where necessary facilitate alternatives analyses) and help develop comprehensive risk mitigation plans, track completion of mitigations, and track risk status through performance, warning and effectiveness metrics. Provide risk-focused coaching and feedback to risk owners to ensure plans are effective and reflect appropriate risk management approaches and principles. Track and report key risk metrics. 

Audit Support: Facilitate audit program to assess record and information management practices. Liaise with business lines to resolve communication, technical, or risk/control issues. Provide design expertise and consultation to business lines. Facilitate on-going monitoring, support, and reporting of remedial action plans. Complete risk evaluation of issues to determine remedial action priority and resource allocation. Track and report key audit issues and metrics.
This position is hybrid, working from your remote office and your assigned work location based on business need. 
PG&E is providing the salary range that the company in good faith believes it might pay for this position at the time of the job posting. This compensation range is specific to the locality of the job. The actual salary paid to an individual will be based on multiple factors, including, but not limited to, specific skills, education, licenses or certifications, experience, market value, geographic location, and internal equity. This job is also eligible to participate in PG&E’s discretionary incentive compensation programs. Although we estimate the successful candidate hired into this role will be placed towards the middle or entry point of the range, the decision will be made on a case-by-case basis related to these factors.
A reasonable salary range is:
Bay Area Minimum: $80,000.00
Bay Area Maximum: $120,000
Job Responsibilities

• Demonstrates full understanding of regulatory policy and compliance concepts. 
• Thoroughly assesses new external regulatory requirements and develops action plans to integrate into work processes and implement controls. 
• Collaborates with team to provide best practice consultation for assessing internal controls for various business processes.
• Collaborates with team to develop controls to mitigate risk and exposure compliance requirements. 
• Thoroughly assesses routine compliance impacts and develop action plans to address gaps. 
• Complete or review all assessments tested by the business. 
• Assists in all forms of research for information on past, current and of pending future regulatory requirements. 
• Assists in evaluating control deficiencies in accordance with the company’s framework for evaluating control exceptions and deficiencies to conclude on potential impact to the company. 
• Assists with the preparation of reports/presentations on the status of all risk and compliance activities.

Qualifications
Minimum

• Bachelor’s degree in any of: Management, Risk, Insurance, Business, Accounting, Finance, or related discipline; or equivalent experience
• Requires a minimum of three years of experience in risk or compliance management, utility operations or related field

Desired

• Ability to learn new concepts quickly 
• Solid technical knowledge of compliance and risk
• Good research and issue resolution skills 
• Ability to assess and recommend solutions for assigned projects 
• Ability to prioritize, plan, perform and communicate activities both in written and verbal form 
• Understands the company and regulatory organizational structure and how to interact with and utilize available contacts and resources