Compliance Risk Specialist

About the role

The Risk Specialist is the operational engine of Raise's Risk & Compliance function. This role carries the process-driven execution of Raise's insurance and privacy compliance programs — underwriting data assembly, loss run analysis, evidence collection, questionnaire preparation, records maintenance, and audit remediation — plus first-line intake for cross-functional compliance questions. The role exists so that Raise's compliance obligations run on time, every time, and so that strategic capacity within the function is freed to focus on broker negotiation, leadership, Data Protection Officer accountability, and expansion into new jurisdictions. The Risk Specialist owns defined processes outright; matters requiring judgment beyond documented guidance, regulator correspondence, or contractual commitment escalate to the Senior Compliance Officer & DPO. The role requires the ability to be flexible and pivot priorities quickly.

As part of our hiring process, the first step will include an interview conducted by an AI interviewer. This allows us to efficiently and fairly assess all applicants using consistent, unbiased questions.

Please note that this role has been cross-posted as we are considering candidates from either Canada or the USA. There is one role available.

Location: Remote, USA

Employment Type: Permanent Full-Time

Responsibilities

• Gather, organize, and quality-check underwriting data ahead of each of the three annual renewal cycles (US GL, US WC Captive/ISL, CAN GL) so renewal negotiations begin with complete submissions.
• Collect quarterly loss run reports and prepare first-pass summaries and trend flags feeding the ISL Captive program review.
• Conduct routine insurance viability checks for new clients and roles against documented criteria.
• Review escalated WC classification matters, maintain classification documentation and precedent records, and hold regular code-usage check-ins with the Coordinator.
• Review WC code and premium audit findings and remediate them, taking items back to the carrier.
• Collect, upload, and organize control evidence in Vanta; monitor control status and flag drift or gaps before they become audit findings; maintain evidence, documents, and policies year-round.
• Prepare first drafts of client security and privacy questionnaires from the approved answer library, coordinate SME input, and manage the response pipeline to agreed turnaround times (11 questionnaires last year, trending up).
• Maintain records of processing activities and execute routine data transfer and cybersecurity policy documentation updates.
• Act as first point of intake for ad hoc compliance questions from internal stakeholders: resolve routine matters against documented policy and guidance, route novel or high-risk questions with a complete situation summary.
• Assemble engagement details and complete the initial data-gathering stage of new client and vendor risk assessments.
• Handle routine policy interpretation per documented guidance.
• Attend the implementation/roll-out cadence and recurring team and operational meetings alongside