Principal Risk & Compliance Analyst

Department Overview

The Enterprise Records and Information Management (ERIM) organization is an enterprise-wide program advancing the records and information management program maturity of the company and Functional Areas (FA) through implementation of compliant, efficient, and systematic controls for the creation, receipt, maintenance, use, and disposition of information and records.

 ERIM is responsible for transforming PG&E’s information and records management practices to ensure compliance with laws and regulations, reduce risk, and promote safe and effective business operations. ERIM is responsible for policy, strategy, and guidance for information and records assets, and for monitoring compliance and supporting development of consistent and integrated processes that promote the responsible management of the information lifecycle to further PG&E’s immediate and future regulatory, legal, and operational requirements.
 

Position Summary

The Principal Risk & Compliance Analyst will report to the Manager, Compliance, and is responsible for supporting an effective and efficient Records and Information Management (RIM) risk program. This position supports the development and implementation of a risk management framework and analyzes risks and mitigation plans. This position will also coordinate with enterprise risk owners across PG&E to collaborate on operational and enterprise risks and the execution and effectiveness of risk mitigation activities. 

The Principal Risk & Compliance Analyst will serve as a liaison with the enterprise risk management organization to ensure alignment and common understanding of risks and prepare analysis and reports for the ERIM organization and the enterprise. The position will also lead the development of strategy and materials for the Risk Assessment & Mitigation Phase (RAMP) and General Rate Case (GRC) proceedings.

The Principal Risk & Compliance Analyst will also provide oversight of enterprise compliance activities, to increase the maturity of Functional Area compliance programs and performance.

The role will support Functional Area compliance programs and activities, identifying and assessing information and records compliance requirements and risks, developing controls, evaluating deficiencies, supporting the design of mitigating activities, and helping to facilitate and publish policies and standards. 

The Principal will also act as an advocate for and help train and engage employees and leaders throughout the company to ensure understanding of program guidance and to facilitate Functional Area compliance behaviors that effectively manage risk. 

This position is hybrid, working from your remote office and your assigned work location based on business need.

PG&E is providing the salary range that the company in good faith believes it might pay for this position at the time of the job posting. This compensation range is specific to the locality of the job. The actual salary paid to an individual will be based on multiple factors, including, but not limited to, specific skills, education, licenses or certifications, experience, market value, geographic location, and internal equity. 

A reasonable salary range is:

Bay Area Minimum: $129,000
Bay Area Maximum: $207,000
 

Job Responsibilities

•    Serves as a subject matter expert (SME) for records and information management (RIM) risk strategy.
•    Leads risk assessment efforts across the enterprise in accordance with PG&E standards.
•    Leads the development of strategy and materials for the Risk Assessment & Mitigation Phase (RAMP) and General Rate Case (GRC) proceedings.
•    Leads the compliance oversight program, supporting Functional Area efforts to identify applicable information and records management compliance requirements and risks, and tracking Functional Area progress on compliance maturity.
•    Collaborates with leadership on development and maintenance of the risk assessment and compliance maturity work and analyses.
•    Oversees coordination of updates, working with key stakeholders and risk champions, including IT, Data Management, Privacy, and Law.
•    Provides process support, advice, and recommendations to ensure effective risk and compliance management within the business.
•    Develops, implements, and monitors appropriate risk mitigation activities and controls, within ERIM and Functional Areas.
•    Recognizes and communicates internal and external developments that may impact risks.
•    Leverages risk information to understand and challenge business decisions.
•    Supports development of best practices in risk and compliance management.
•    Develops and coordinates presentation materials for various levels of management, including executives.
•    Participates in established risk and compliance management forums at the functional area and enterprise levels.
•    Develops risk and compliance program strategies, templates and direction. 
•    Works independently with minimal guidance on complex compliance and risk assessment issues with critical impact to the organization and the company. 
•    Anticipates risk and compliance issues and develops innovative solutions to mitigate risks. 
•    Works with all levels of leadership (up to and including SVP) across functions to influence decisions around risk and compliance issues. 
•    Works with senior management to support strategic planning and decision making on risk and compliance issues. 
•    Assist with other compliance-related projects and activities as directed.


















 

Qualifications

Minimum
•    Bachelor’s degree in any of Management, Risk, Compliance, Business, Finance, or related discipline; or equivalent experience
•    10 or more years of experience in risk or compliance management, utility operations or related field 
 

Desired
•    Master’s Degree or equivalent experience.
•    Prior experience in any of the following: risk or compliance management, information governance, utility operations or related field.
•    Certification in risk management, compliance, or information governance/records management.
•    Extensive knowledge of risk analysis and assessment.
•    Knowledge of records management and information governance.
•    Strong communication skills for all levels of organization, both verbal and in writing.
•    Project management skills.
•    Ability to work across multiple functions and build strong working relationships.
•    Ability to facilitate decision-making.
•    Ability to synthesize complex issues into easy-to-understand concepts.
•    Ability to influence varying levels of leadership and collaborate with cross-functional teams.
•    Ability to manage multiple competing priorities to completion.
•    Ability to handle confidential and sensitive information.
•    Ability to engage appropriate SMEs in problem solving teams.
•    Ability to multi-task and meet critical deadlines while delivering high quality work products.