Hiring.Camp

IT Security and Governance Analyst

Bf

·

May 11, 2026

Location
Louisville Campus, United States of America
Type
Full-time
Department
Security
Experience
3+ years
Source
Workday

Description

CURRENT EMPLOYEES, CONSULTANTS, AND AGENCY PARTNERS:

If you currently work for Brown-Forman, please apply by clicking the Careers icon on the Workday portal.

For best results, use Google Chrome to view this page.

Quote from Hiring Manager:
The IT Governance/Risk/Compliance Analyst position offers a dynamic opportunity for an experienced analyst to help shape the future of our governance, risk, and compliance initiatives. In this role, you’ll be at the forefront of identifying and mitigating IT risks, ensuring regulatory compliance, and enhancing our security posture through robust frameworks and controls. We’re seeking candidates with strong analytical skills, knowledge of risk management frameworks, and the ability to communicate technical concepts to diverse stakeholders.

Meaningful Work From Day One:
The IT GRC Analyst plays a critical role in ensuring that the organization’s IT governance is aligned with business objectives while also adhering to governance standards, risk management practices, and regulatory compliance obligations. In this role, you'll collaborate with cross-functional teams to align risk management strategies, ensure compliance, and foster a unified approach to IT governance.

What You Can Expect:
● Develop and maintain IT governance frameworks and policies that align with industry standards and regulatory requirements, which are then implemented by IT owners.
● Support our IT risk management program to ensure both internal and third-party IT risks are identified, assessed, prioritized and remediated.
● Raise awareness within the organization of IT governance, risk and compliance programs that are risk based and align with compliance requirements.
● Track and ensure compliance with internal policies and external regulations through periodic audits and assessments.
● Ensure data security and privacy compliance by providing guidance on appropriate access controls, data classification protocols, and data protection measures.
● Collaborate with key stakeholders throughout the IT organization as well as with Internal Audit, Compliance, and Legal.
● Monitor evolving regulations, compliance standards, and best practices to strengthen our IT GRC capabilities and frameworks.

What You Bring to the Table:
● 3+ years of experience focused on governance, compliance, risk, audit or similar functions.
● Knowledge of IT governance and risk management frameworks including compliance practices (e.g., PCI, NIST, GDPR, COBIT, NIS2, Operation Technology, etc.).
● Strong analytical skills, attention to detail, and a problem-solving mindset.
● Excellent collaboration, communication and influencing skills with the ability to develop effective working relationships with all levels of the company.
● Exposure to risk assessments, policy development, and internal control audits.

What Makes You Unique:
● Bachelor’s degree within a related area of study.
● Information security related training or certifications such as CISA, CRISC, PCI QSA.
● Experience working with GRC platforms and tools.
● Familiarity with third-party risk management and vendor compliance.

Who We Are:
We believe great people build great brands. And we know there is Nothing Better in the Market than a career at Brown-Forman. Being a part of Brown-Forman means you will grow both personally and professionally. You will have the opportunity to solve problems, seize opportunities, and generate bold ideas. You will belong to a place where teamwork matters and where you are encouraged to bring your best self to work.

What We Offer:
Total Rewards at Brown-Forman is designed to engage our people to ensure sustainable and profitable growth for generations to come. As a premium spirits company, we offer equitable pay structures for individual and company performance alongside a premium employee experience. We offer a range of premium benefits that reflect our company values and meet the needs of our diverse workforce. #LI

Requisition Type:

Employee

Management Level:

Professional

Global Job Level:

P5

Number of Openings Available:

1

Skills

WorkdayRisk ManagementComplianceGDPR

Similar Jobs

30

ASSISTANT DIRECTOR, IT SECURITY AND NETWORK SERVICES

Atlanta Public Schools

Yesterday

Head of IT and Security - Counter Terrorism Policing

West Midlands Police · Birmingham, West Midlands, United Kingdom, GB · Onsite

Yesterday

IT Security and Compliance Specialist I

Nc · 1636 Gold Star Dr Wake, United States of America

3 days ago

Senior IT and Security Administrator

Druid Software · Bray, Wicklow, Ireland

1 week ago

ATL Security and IT Manager

Utaustin · PICKLE RESEARCH CAMPUS, United States of America

3 weeks ago

Cyber and IT Security Engineering Principal Specialist SG

CIMB Group Malaysia · Singapore, SG

3 weeks ago

IT and Security Officer (m/f/d)

idealworks GmbH · München, Bayern · Remote, Hybrid

1 month ago

Director, IT Security and Infrastructure

Fanshawec · London Campus, Canada · Hybrid

1 month ago

IT Security and Compliance Analyst

Bristow Group With its headquarters · Americas > US > Texas > Houston, United States of America

2 months ago

Director of DevOps, IT, and Security

Zippy · United States (Remote) · Remote

3 months ago

IT Security and Compliance Specialist

Abbott · Philippines > Taguig City : Five/Neo Building

3 months ago

IT and Security Analyst

Tavily · Tel Aviv

4 months ago

Senior IT and security Administrator – Malware Protection Specialist

act digital · Montréal, Canada

1+ year ago

IT Risk and Security Engineer - Governance & Administration

Depository Trust Company · Hyderabad, India

2 days ago

Project Manager- IT Infrastructure and Security

UDR · Highlands Ranch, CO

2 weeks ago

IT Risk and Security Compliance Specialist

Respond.io · Kuala Lumpur, MY

2 weeks ago

Senior IT Network and Security Administrator Engineer

Arlon Graphics LLC · Placentia, CA

4 weeks ago

Director IT Risk and Security Management

Depository Trust Company · Tampa, FL, United States, US

1 month ago

Group IT Operations and Security Officer

Luxaviation · Johannesburg, South Africa

2 months ago

Manager IT and Corporate Security

"Olivine, Inc." · Kapolei, HI

3 months ago

Manager IT and Corporate Security

"Olivine, Inc." · Berkeley, CA

3 months ago

Lead IT Risk and Security Engineer

Depository Trust Company · Jersey City, NJ, United States, US

3 months ago

Lead IT Risk and Security Engineer

Depository Trust Company · Jersey City, NJ, United States, US

3 months ago

IT Risk and Security Engineer

Depository Trust Company · Hyderabad, India

3 months ago

IT Cloud and Security Engineer

Circuit Check · Maple Grove, MN +1

4 months ago

Security Engineer and IT Systems Admin.

Empowerai · Jefferson City, MO, US

1+ year ago

IT Infrastructure and security Engineer

Placeme · Athlone, IE

1+ year ago

Manager, IT Support, Operations and Security

Strathcona County · Sherwood Park, AB, Canada

6 days ago

Lead Security Engineer, Internal and IT

Artemis · New York City · Onsite

1 week ago

Senior Service Engineer - IT Infra and Cyber Security

Gevernova · Noida, India

1 month ago