Governance, Risk & Compliance Analyst

About the role

A global fintech leader, Acrisure empowers millions of ambitious businesses and individuals with the right solutions to grow boldly forward. Bringing cutting-edge technology and top-tier human support together, we connect clients with customized solutions across a range of insurance, reinsurance, payroll, benefits, cybersecurity, mortgage services – and more. In the last twelve years, Acrisure has grown in revenue from $38 million to almost $5 billion and employs over 19,000 colleagues in more than 20 countries. Acrisure was built on entrepreneurial spirit. Prioritizing leadership, accountability, and collaboration, we equip our teams to work at the highest levels possible.

We are seeking a detail-oriented and motivated GRC Analyst to join our growing team. The ideal candidate will have 32+ years of experience in supporting governance, risk, and compliance initiatives. This includes assisting with client/prospect compliance questionnaires, user access reviews, SOC1 and SOC2 audits, Sarbanes-Oxley IT general controls audits, and internal risk reviews. You will help maintain awareness of relevant cybersecurity regulations and contribute to implementing audit, governance, risk, and compliance (GRC) frameworks. As a GRC Analyst, you will collaborate across departments to ensure security solutions protect internal systems, vendor environments, and customer data while also aligning with compliance requirements. Join one of the fastest-growing companies in the world, where you’ll gain hands-on experience with cybersecurity, compliance, and privacy frameworks, and work alongside industry experts in an environment built for growth, impact, and continuous learning.

Responsibilities

• Support governance, risk, and compliance (GRC) activities by assisting with cybersecurity framework implementation and regulatory compliance efforts.
• Participate in internal and external audits by coordinating evidence collection, tracking remediation efforts, and supporting readiness for SOC 2, SOX ITGC, and HIPAA assessments.
• Performing user access reviews for assigned applications and systems.
• Assist in maintaining compliance with regulatory standards including SOX, HIPAA, SOC 2, GDPR, and PCI-DSS, while staying informed about evolving cybersecurity laws and obligations.
• Collaborate