Information Governance Analyst I (Future Opening)

Management of an enterprise-wide information governance (IG) program enabling the business to operate securely, protect its people, defend its assets, and preserve shareholder value. Support GCI's Information Governance Program providing training and directives to team members and perform as backup for the Lawful Compliance process.

ESSENTIAL DUTIES AND RESPONSIBILITIES

Information & Records Management :

• Develop standards, tools, and governance for capturing, modeling, storing, and delivering data for the enterprise in multiple platforms, primarily M365.
• Maintain GCI's Record Retention Schedule, ensuring retention periods for company records are in line with company policy, federal, state, and local laws, rules, and regulations.
• Support information governance related initiatives to include providing guidance for data classification and records management requirements.
• Identify risks related to the poor management of records and unsecured data.
• Work with business units and functional areas to implement changes and monitor controls for managing and securing records.
• Track, maintain, and monitor offsite physical record inventory for GCI.
• Manage electronic and or physical records classification and retrieval systems.
• Facilitate and coordinate the review and secure disposition of physical and electronic records.
• Integrate document and record management processes and guidelines with other information management systems.
• Work with users to efficiently manage hard copy and electronic records.
• Support audit processes and remediation plans.
• Support the security awareness and training objectives of the Enterprise Security Office.

Lawful Compliance Backup :

Information Governance Analyst (Job Family) K Schenker 5.2024 KR 5.2024

Page 2 of 6

Training :

COMPETENCIES :

oAbility to work independently while handling multiple projects with changing priorities and deadlines.

BASIC PRINCIPLES - Interacts with people in a way that builds mutual trust, confidence, and respect; adheres to GCI's Code of Conduct for Employees - the Basic Principles.

COLLABORATION - Works effectively with others to accomplish common goals and objectives; maintains positive relationships even under difficult circumstances.

o Ability to interact with GCI's personnel at all levels and across all business units and organizations, and to comprehend business imperatives.

o Ability to work and coordinate with multi-team environment including program managers, business analyst, IT analyst and other security professionals.

COMMUNICATION- Conveys thoughts and expresses ideas appropriately and professionally.

o Excellent verbal and written communication skills and the ability to interact professionally with a diverse group of executives, managers, and subject matter experts.

o Demonstrated ability to discuss complex technical details with extended support staff and translate into non-technical communication.

COMPLIANCE - Follows internal controls; protects confidential information; abides by GCI's Code of Business

Conduct & Ethics.

o At all times is a model example of GCI's values, principles, ethics, and code of conduct, is a model example of integrity and trustworthiness, honors the confidentiality of information entrusted to them, promotes, and fosters the mission statement for the Enterprise Security Office.

CUSTOMER FOCUS - Demonstrates commitment to service excellence; gives high priority to customer satisfaction.

o A strong customer / client focus, with the ability to manage expectations appropriately, to provide a superior customer / client experience and build long-term relationships.

RELIABILITY - Consistently follows through on assigned tasks as expected; demonstrates timely attendance at meetings, training, and other work obligations.

RESULTS - Uses a combination of job knowledge, initiative, sound decision making, innovation, adaptability, and problem solving.

o Strong analytical skills to analyze security requirements and relate them to appropriate security controls.

o Experience with frameworks and standards, such as ISO 15489, ISO 9001 : 2008 (4.2.4), ISO 23081, ISO 27001 / 2, ITIL, COBIT, and NIST frameworks.

o Experience with privacy and compliance standards, such as SOX, HIPAA and PCI-DSS

o Knowledge of information security data and processes.

o Excellent organizational, planning and time management skills.

o Knowledge of the fundamentals of project management.

o Knowledge of risk assessment methods and technologies.

o Knowledge of data protection law and practices (e.g., GDPR, California Consumer Privacy).

o Ability to support audit processes and remediation plans.

o Ability to support the security awareness and training objectives of the Enterprise Security Office.

SAFETY & SECURITY - Supports a safe work environment by following all workplace safety rules and guidelines; complies with applicable Security policies and procedures.

Strong working knowledge of MS Office Suite in M365. Proficient computer skills to complete job duties effectively.

Additional Job Requirements :

This is an entry level position working under close supervision, requiring the ability to aid higher level staff.

Minimum Qualifications :

Required :

Preferred :

DRIVING REQUIREMENTS :

PHYSICAL REQUIREMENTS and WORKING CONDITIONS :

The company and its subsidiaries operate in a 24 / 7 environment providing critical services to Alaskans and may need to respond to public health and safety matters or other business emergencies. Due to business needs employees may be contacted outside of the core business hours to respond to the immediate emergency. As such, you will be requested to provide emergency after hours contact numbers, to include your home and cell phone numbers if you have those services.

Culture, Engagement, and Connection : At GCI, we foster an environment where the unique perspectives of our employees, customers, and fellow Alaskans are celebrated. We add value to our community by nurturing and empowering each member of our workforce, ensuring equal opportunities for every Trailblazer.

EEO : GCI is an equal opportunity employer. Qualified applicants are considered for employment without regard to race, color, religion, national origin, age, sex, sexual orientation, gender identity, marital status, mental or physical disability, veteran status, or any other status or classification protected under applicable state or federal law.

DISCLAIMER : The information in this description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities, and qualifications required of employees assigned to this job.