Principal Risk & Compliance Analyst

Department Overview

The Information & Records Governance (IRG) organization is an enterprise-wide program advancing the information and records management program maturity of the company and Functional Areas (FA) through implementation of compliant, efficient, and systematic controls for the creation, receipt, maintenance, use, and disposition of information and records. IRG is responsible for transforming PG&E’s information and records management practices to ensure compliance with laws and regulations, reduce risk, and promote safe and effective business operations. IRG is responsible for policy, strategy, and guidance for information and records assets, and for monitoring compliance and supporting the development of consistent and integrated processes that promote the responsible management of the information lifecycle to further PG&E’s immediate and future regulatory, legal, and operational requirements.

Position Summary

The Principal Risk & Compliance Analyst will report to the Director, Information Governance and is responsible for supporting an effective and efficient Data, Information, and Records Management (DIRM) risk program. This position supports the development and implementation of a risk management framework and analyzes risks and mitigation plans. This position will also coordinate with enterprise risk owners across PG&E to collaborate on operational and enterprise risks and the execution and effectiveness of risk mitigation activities. The Principal Risk & Compliance Analyst will serve as a liaison with the enterprise risk management organization to ensure alignment and common understanding of risks and prepare analysis and reports for the IRG organization and the enterprise. The position will also lead the development of strategy and materials for the Risk Assessment & Mitigation Phase (RAMP) and General Rate Case (GRC) proceedings. The Principal Risk & Compliance Analyst will also provide oversight of enterprise compliance activities, to increase the maturity of Functional Area compliance programs and performance.

Job Responsibilities

• Serves as a subject matter expert (SME) for the Data, Information, & Records Management (DIRM) risk strategy.
• Leads risk assessment efforts across the enterprise in accordance with PG&E standards.
• Leads the development of strategy and materials for the Risk Assessment & Mitigation Phase (RAMP) and General Rate Case (GRC) proceedings.
• Collaborates with leadership on development and maintenance of the risk assessment and compliance maturity work and analyses.
• Oversees coordination of updates, working with key stakeholders and risk champions, including IT, Data Management, Privacy, and Law.
• Provides process support, advice, and recommendations to ensure effective risk and compliance management within the business.
• Develops, implements, and monitors appropriate risk mitigation activities and controls, within IRG and Functional Areas.
• Recognizes and communicates internal and external developments that may impact risks.
• Leverages risk information to understand and challenge business decisions.
• Supports development of best practices in risk and compliance management.
• Leads the compliance oversight program, supporting Functional Area efforts to identify applicable information and records management compliance requirements and risks, and tracking Functional Area progress on compliance maturity.
• Develops and coordinates presentation materials for various levels of management, including executives.
• Participates in established risk and compliance management forums at the functional area and enterprise levels.
• Develops risk and compliance program strategies, templates and direction.
• Works independently with minimal guidance on complex risk and compliance assessment issues with critical impact to the organization and the company.
• Anticipates risk and compliance issues and develops innovative solutions to mitigate risks.
• Works with all levels of leadership (up to and including SVP) across functions to influence decisions around risk and compliance issues.
• Works with senior management to support strategic planning and decision making on risk and compliance issues.
• Assists with other compliance-related projects and activities as directed.

Qualifications

Minimum

• Bachelor’s degree in any of Management, Risk, Compliance, Business, Finance, or related discipline; or equivalent experience
• 10 or more years of experience in risk or compliance management, utility operations or related field

Desired

• Master’s Degree or equivalent experience.
• Prior experience in any of the following: risk or compliance management, information governance, utility operations or related field.
• Certification in risk management, compliance, or information governance/records management.
• Extensive knowledge of risk analysis and assessment.
• Knowledge of records management and information governance.
• Strong communication skills for all levels of organization, both verbal and in writing.
• Project management skills.
• Ability to work across multiple functions and build strong working relationships.
• Ability to facilitate decision-making.
• Ability to synthesize complex issues into easy-to-understand concepts.
• Ability to influence varying levels of leadership and collaborate with cross-functional teams.
• Ability to manage multiple competing priorities to completion.
• Ability to handle confidential and sensitive information.
• Ability to engage appropriate SMEs in problem solving teams.
• Ability to multi-task and meet critical deadlines while delivering high quality work products.