Junior Governance, Risk & Compliance Analyst
Free to start · No card · 5 credits the moment you sign up
Job description
Lee Enterprises is seeking a motivated Junior GRC Analyst to join our growing Governance, Risk & Compliance (GRC) team. This part-time, developmental position offers an opportunity to gain direct exposure to enterprise risk management, compliance, and governance initiatives in a fast-paced, collaborative environment. This role serves as a launchpad — after a successful 90-day performance review, the position may transition into a full-time GRC Analyst role with expanded responsibilities and a competitive annual salary ($60K–$80K, commensurate with experience and performance). The ideal candidate is curious, detail-oriented, and eager to learn. You’ll work closely with senior members of the GRC team and cross-functional partners in Legal, Finance, IT, and Operations to strengthen our risk-aware culture and governance practices.
KEY RESPONSIBILITIES
Risk Identification & Monitoring
Assist in identifying, assessing, and tracking risks across IT and enterprise functions. Support maintenance of the enterprise risk register and dashboards used by leadership.
Governance & Compliance Support
Help draft, organize, and maintain policies, standards, and procedures. Support compliance awareness campaigns and training that promote a culture of risk accountability.
Framework Alignment
Learn and assist in mapping controls to frameworks such as NIST CSF, COBIT 2019, and ISO 27001. Support tracking and validation of control effectiveness through GRC tools or reports.
Collaboration & Reporting
Partner with GRC leadership to prepare reports, metrics, and presentations for management. Contribute to meetings with stakeholders across Legal, Finance, IT, and Operations.
Operational Support & Learning
Provide day-to-day administrative and research assistance to the GRC team. Demonstrate initiative, curiosity, and a commitment to learning risk and compliance fundamentals.
QUALIFICATIONS
Must Have:
Strong organizational and written communication skills. Detail-oriented with an analytical mindset and ability to problem-solve. Interest in learning frameworks such as NIST, COBIT, ISO 27001, or SOC 2. Desire to learn, hunger to achieve, and persistence to accomplish.
Nice to Have:
Internship experience in governance, risk, compliance, audit, or related disciplines (internships and academic experience welcome). Bachelor’s degree (completed or in progress) in Information Security, Risk Management, Business Administration, or a related field — or equivalent experience. Experience supporting policy writing, audits, or risk assessments. Exposure to GRC tools or risk management platforms. Familiarity with cybersecurity, data protection, or IT operations concepts. Relevant certifications (e.g., Security+, CISA, CISM, CGRC) are a plus.
Why Join the GRC Team?
Opportunity to develop real-world GRC experience in a supportive environment. Work directly with senior GRC leadership and cross-functional teams. Build the skills needed to progress into a full-time GRC Analyst role. Gain enterprise-wide exposure to risk management, compliance, and governance functions. Be part of a team driving a risk-first culture across the organization.
Originally posted on Himalayas
Prepare your application
Use the description above to assess your fit for Lee Enterprises. This checklist is guidance from Resumize, rather than additional requirements from the employer. Imported listings can be shortened or change after collection, so confirm the complete description and current availability before sending an application.
Match requirements to evidence
Identify the responsibilities and skills the employer explicitly names. For each important requirement, choose one example from your work, education, training, or projects. Explain what you did, how you did it, and what changed as a result. Include a measurable outcome when you can support it. If you lack a requirement, describe related experience accurately instead of adding an unfamiliar skill to your resume.
Put the most relevant examples near the top of your resume. Keep job titles, dates, qualifications, and contact details consistent across your application materials. Use the employer’s terminology when it describes your experience accurately; a copied list of keywords does not explain your contribution. A short, specific bullet is easier to review than a paragraph that mixes several unrelated duties.
Check the working arrangement
Confirm the location, schedule, employment type, and any eligibility requirements on the employer’s site. A remote label does not establish worldwide eligibility or flexible hours. If compensation, benefits, equipment, travel, or contract duration are missing from this listing, write down your questions for the recruiter. Do not assume details from another opening at the same company apply to this role.
Review before submitting
Follow the employer’s requested file format and application instructions. Open your exported resume and check that its text is selectable, its sections read in order, and its links work. Proofread names, dates, and contact information. Share confidential work samples only when you have permission, and use an anonymized example when necessary.
Submit through a trusted employer or recruiting destination. If the original listing has disappeared, search the employer’s careers page for the title rather than assuming the vacancy remains open. Save the application date, job reference, and the version of your resume you sent. Those details help you prepare for a later conversation and avoid submitting conflicting information through several job boards.
Review your resume for writing and readability feedback, or browse other openings if this opportunity is unavailable.