Governance, Risk, and Compliance Analyst - Unilever Prestige

Governance, Risk, and Compliance Analyst - Unilever Prestige

Unilever Prestige is the Luxury Beauty division of Unilever that holds eight companies / brands : Dermalogica, Murad, Living Proof, Hourglass, Tatcha, Paula-s Choice, K18 and Garancia. The businesses have a global footprint, are omni-channel in nature and with a heavy index to e-commerce and direct to consumer offerings. Our brands blend luxury physical in-store experiences with digitalized e-commerce offerings including digital technologies embedded within product offerings. It operates a unique organizational model that places high emphasis on independence, entrepreneurship, and speed, all rooted in individual breadth and depth of capability. The division is one of Unilever-s key strategic bets and has seen consistent double-digit growth through both organic and M&A growth.

Reporting to the Senior Director of Information Security, the GRC Analyst will play a critical role in supporting the organization-s compliance and risk management programs. This position is responsible for assessing third-party risks, maintaining the enterprise risk register, collecting audit evidence, and promoting adherence to compliance standards.

Responsibilities / Essential Job Functions

• Third-Party Risk Assessments
• Conduct risk assessments for vendors, partners, and other third parties.
• Evaluate security, privacy, and compliance controls against organizational standards.
• Risk Register Management
• Maintain and update the organizational risk register.
• Track mitigation plans and monitor risk status across business units.
• Audit Support
• Collect and organize evidence for audits (including PCI and SOX).
• Collaborate with stakeholders to ensure timely and accurate documentation.
• Privacy Compliance Support
• Apply fundamental knowledge of U.S. or EU privacy laws (e.g., CCPA, GDPR).
• Assist in privacy impact assessments and data protection reviews as needed.

Requirements and Qualifications

Skills : Strong communication skills for cross-functional collaboration.

Knowledge : Familiarity with regulatory frameworks such as PCI DSS, SOX, and privacy regulations (GDPR, CCPA).

Experience : 2+ years of experience in compliance, risk management, or audit support.

This is a fully remote role with Dermalogica as the employer and on its employment terms. Apply now and become a key contributor to the Unilever Prestige growth trajectory! Dermalogica is an equal opportunity employer committed to fostering an inclusive culture where all employees are valued, supported, and empowered to succeed.