Senior Analyst, Technology Compliance - Remote Texas (Finance)

Logistics at full potential.

At GXO, we're constantly looking for talented individuals at all levels who can deliver the caliber of service our company requires. You know that a positive work environment creates happy employees, which boosts productivity and dedication. On our team, you'll have the support to excel at work and the resources to build a career you can be proud of.

The Senior Analyst, information security - Cyber Governance helps to ensure GXO meets regulatory and industry compliance requirements. They will play a key role in designing, implementing, and managing compliance frameworks and initiatives to support GXO compliance program, and will collaborate with internal and external stakeholders to ensure adherence to relevant standards, regulations, and best practices.

Pay, benefits and more.

We are eager to attract the best, so we offer competitive compensation and a generous benefits package, including full health insurance (medical, dental and vision), 401(k), life insurance, disability and more.

What you'll do on a typical day:

Compliance Program Management:

• Support in the development, implementation, and maintenance of GXO information security compliance program to align with regulatory, contractual, and industry standards (FISMA, CMMC, CCPA, SOX, PCI-DSS, SOC1&2, NIST CSF).
• Coordinate compliance assessments and audits, ensuring timely and accurate reporting.
• Partner with cross-functional teams (IT, Legal, HR, Business...) to embed compliance requirements into processes and systems.
• Track, monitor, and report on compliance status across the AMAPAC Region.

Audit Coordination:

• Support the Infosec GRC manager to prepare for and lead internal and external compliance audits, including evidence collection, review, and remediation planning.
• Work closely with auditors and regulatory bodies to address findings and implement corrective actions.
• Maintain documentation of audit results and follow-up activities to demonstrate ongoing compliance.

Policy and Standards Development:

• Help create and update information security policies, standards, and procedures to meet compliance requirements and organizational objectives.
• Ensure policies are effectively communicated and understood across the organization.

Regulatory Monitoring:

• Stay current with evolving regulations, standards, and industry trends affecting GXO compliance posture.
• Assess the impact of new regulations and provide recommendations to ensure continued compliance.

Reporting and Documentation:

• Maintain thorough documentation of compliance activities, policies, procedures, and audit results in GXO GRC tool.
• Communicate complex compliance requirements in a clear and actionable manner to non-technical audiences.

What you need to succeed at GXO:

At a minimum, you'll need:

• Bachelor's degree in IT or Cyber Security or in a related field
• 2 years in a similar role with 5 years in Information Security
• Expertise in Cyber Security frameworks (FISMA, CMMC, CCPA, SOX, PCI-DSS, SOC1&2, NIST CSF ...)
• Knowledge and experience in control environment setting and auditing.
• Experience in audit management.
• Solid understanding of security technologies and practices, key network and technical security controls, and IT Risk and Security governance.
• Experience in using GRC tools.

It'd be great if you also have:

• Complex problem solving and analysis.
• Process driver with strong attention to detail.
• Identifies opportunities to increase accuracy and optimize resources and develops/recommends/implements solutions.
• Strong aptitude for understanding and analyzing large amounts of data from multiple sources.
• Produces unambiguous, comprehensive and accurate interpretations.
• Develops insightful, value-added and actionable analyses with detailed explanations regarding drivers of those results.

We engineer faster, smarter, leaner supply chains.

GXO is a leading provider of cutting-edge supply chain solutions to the most successful companies in the world. We help our customers manage their goods most efficiently using our technology and services. Our greatest strength is our global team - energetic, innovative people of all experience levels and talents who make GXO a great place to work.

We are proud to be an Equal Opportunity/Affirmative Action employer. Qualified applicants will receive consideration for employment without regard to race, sex, disability, veteran or other protected status.

GXO adheres to CDC, OSHA and state and local requirements regarding COVID safety. All employees and visitors are expected to comply with GXO policies which are in place to safeguard our employees and customers.

All applicants who receive a conditional offer of employment may be required to take and pass a pre-employment drug test.

The above statements are intended to describe the general nature and level of work being performed by people assigned to this classification. They are not intended to be construed as an exhaustive list of all responsibilities, duties and skills required of personnel so classified. All employees may be required to perform duties outside of their normal responsibilities from time to time, as needed. Review GXO's candidate privacy statement here.