Policy Analyst

Location: Hershey, PA Career Level T30 Why Hershey: At The Hershey Company, our culture is rooted in purpose and inspired by Milton Hershey’s enduring vision that business should create opportunity for others. Through our commitment to corporate philanthropy, we create positive impact by supporting communities, helping children thrive, and operating as a business for good. This includes our deep and long standing partnership with Milton Hershey School, where we invest in education, workforce readiness, and hands on engagement to help students succeed beyond the classroom. Supported by strategic grantmaking, product donations, cross brand collaboration, and strong employee volunteerism, Hershey offers a place to work where making a difference—locally and globally—is part of how we do business every day.   About The Hershey Company

The Hershey Company is an industry-leading snacks company known for making more moments of goodness through its iconic brands. With a strong portfolio across chocolate, confectionery, and salty snacks, Hershey delights consumers every day. Our beloved brands include Hershey’s, Reese’s, KitKat®, Dots Pretzels, Lesser Evil, Jolly Rancher, Twizzlers, Ice Breakers, and more.   At Hershey, we are committed to making a meaningful difference in the communities where we live, work, and do business. This commitment originated with our founder, Milton Hershey, and continues to shape who we are today.   Guided by our employee value proposition, Lead Today. Create Tomorrow, we empower our people to drive impact now while shaping what comes next. Our One Hershey mindset brings teams together across functions, geographies, and businesses, enabling us to operate with speed, collaboration, and shared purpose.   The Hershey Company is proud to be recognized as a top employer in the United States, reflecting our commitment to our people, culture, and purpose.  How will you fit in the big picture?

The Policy Analyst, GRC (Governance, Risk & Compliance) supports the development, maintenance, and lifecycle management of IT and Information Security policies, standards, procedures, and guidelines. This role partners with IT, Information Security, and business stakeholders to help ensure governance documentation is clear, current, and aligned with Hershey’s common controls framework, risk management practices, operational requirements, and applicable industry frameworks. This position provides an opportunity to build foundational experience in Governance, Risk & Compliance (GRC) while supporting the continued maturity of Hershey’s IT governance program.   What will you do?   Policy & Governance Management: Support the creation, review, maintenance, and lifecycle management of IT and Information Security policies, standards, procedures, and guidelines. Stakeholder Collaboration: Work with IT, Information Security, and business stakeholders to develop and update governance documentation and coordinate reviews, feedback, approvals, and publication. Standards Development: Provide templates, guidance, and support to IT and Information Security teams when developing standards and supporting governance documentation. Controls & Framework Alignment: Help align policies and standards with Hershey’s common controls framework and applicable industry and regulatory frameworks, including NIST, ISO, SOX, and PCI. Risk & Compliance Alignment: Support updates to governance documentation resulting from risk assessments, control changes, audit findings, compliance requirements, issues, and remediation activities. Policy Exception Support: Assist with administration and tracking of policy exceptions, including documentation, status, expiration dates, and stakeholder follow-up. Governance Reporting & Improvement: Support governance metrics and reporting and identify opportunities to improve policy processes, templates, workflows, and documentation. GRC Development: Build