Governance, Risk and Compliance Analyst

Acrisure

. Support governance, risk, and compliance activities through cybersecurity framework implementation and regulatory compliance efforts .

Posted 9/24/2026full-timeAtlanta • Michigan • United StatesJuniorMid-LevelWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in governance, risk, and compliance (GRC) activities, with a strong focus on cybersecurity frameworks and regulatory compliance. Proficient in managing audits and ensuring adherence to security standards such as SOC 2, SOX, HIPAA, and GDPR.

Highest-signal resume keywords

Governance, Risk, And Compliance (GRC)Cybersecurity Framework ImplementationSOC 2, SOX, HIPAA ComplianceNIST, ISO 27001, CIS ControlsCRISC, CISSP, CISA, CEH Certifications

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Regulatory ComplianceUser Access ReviewsEvidence CollectionRemediation TrackingSecurity Standards UnderstandingAudit CoordinationCybersecurity Laws KnowledgeComplex Timeline ManagementAttention To DetailMultitasking

Soft Skills

Effective CommunicationTeamworkProblem SolvingTime ManagementPositive Attitude

Certifications & Qualifications

CRISCCISSPCISACEH

Industry Keywords

SOXHIPAASOC 2GDPRPCI-DSSNYDFSSecurity InitiativesCross-Functional CollaborationInternal Systems ProtectionVendor Environments

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Support governance, risk, and compliance activities through cybersecurity framework implementation and regulatory compliance efforts
Participate in internal and external audits by coordinating evidence collection and tracking remediation efforts
Support readiness for SOC 2, SOX ITGC, and HIPAA assessments
Perform user access reviews for assigned applications and systems
Maintain compliance with SOX, HIPAA, SOC 2, GDPR, and PCI-DSS
Stay informed about evolving cybersecurity laws and obligations
Collaborate with cross-functional teams on security initiatives
Communicate with technical and non-technical stakeholders
Help ensure security solutions protect internal systems, vendor environments, and customer data while aligning with compliance requirements

Requirements

What you’ll need

2+ years of relevant experience in GRC-focused security activities
Understanding of security standards and frameworks such as NIST, ISO 27001, CIS Controls, and industry compliance regulations (NYDFS, GDPR, HIPAA, PCI-DSS)
Proven ability to manage complex timelines and deliverables, ensuring alignment with organizational goals and regulatory requirements
Bachelor’s degree (or equal experience) in an Information Systems Assurance or related field
Ability to work independently and interact with team members
Teamwork, motivation, positive behavior, and effort to achieve goals and objectives
Ability to meet deadlines and work with a sense of urgency
Effective written and verbal communication, active listening, and problem solving with minimal assistance
Excellent time management and prioritization skills
Attention to detail and commitment to accuracy
Ability to multitask, work independently, and use discretion with sensitive information
Professional demeanor and positive attitude
Candidates should be comfortable with an on-site presence
Preferred certifications: CRISC, CISSP, CISA, CEH

Benefits

Comp & perks

Comprehensive medical insurance, dental insurance, and vision insurance
Life and disability insurance
Fertility benefits
Wellness resources
Paid sick time
Generous paid time off and holidays
Employee Assistance Program (EAP)
Complimentary Calm app subscription
Immediate vesting in a 401(k) plan
Health Savings Account (HSA) and Flexible Spending Account (FSA) options
Commuter benefits
Employee discount programs
Paid maternity leave and paid paternity leave (including for adoptive parents)
Legal plan options
Pet insurance coverage