Senior Governance, Risk & Compliance Analyst

About the role

Chipotle is seeking a Senior Analyst to lead its Governance, Risk and Compliance (GRC) initiatives. Based in Columbus, OH, you will work across all departments to ensure the confidentiality, integrity and availability of applications, infrastructure and business processes.

Key responsibilities

• Develop and implement security awareness trainings and phishing campaigns organization‑wide.
• Collaborate with GRC leadership to roll out global policies, regulatory updates and risk frameworks.
• Monitor PCI‑DSS standards, recommend adjustments, and support audit process improvements.
• Provide guidance to project teams to align new systems and processes with security standards.
• Conduct risk assessments, audits and control testing for PCI‑DSS, SOX and internal security policies.
• Support the Third‑Party Risk Management program, including vendor risk assessments and use of Viso Trust.
• Track remediation of non‑compliance issues, manage policy exceptions and participate in incident response as a scribe.

Required profile

• Several years of experience in governance, risk and compliance within a large enterprise.
• Strong knowledge of PCI‑DSS, SOX and information security frameworks.
• Proven ability to work cross‑functionally and influence stakeholders.
• Excellent analytical and documentation skills.

Required skills

• PCI‑DSS
• SOX
• Viso Trust