Lead Governance, Risk, and Compliance Analyst

Job Summary:

We are seeking a highly experienced and motivated Senior GRC Analyst to join our dynamic team.  The ideal candidate will have between 10 to 25 years of experience in responding to client/prospect compliance questionnaires and cybersecurity assessments, performing internal risk assessments, maintain awareness of existing and proposed cyber security regulations, and hands-on experience with audit, governance, risk, and compliance (GRC) frameworks.

This individual will work across multiple departments to ensure security solutions protect both internal and third party (vendor) systems and customer data.  You will play a critical role in ensuring that security practices are aligned with compliance requirements while driving technical solutions for secure systems and data protection across the entire organization.

Join one of the fastest-growing companies in the world, where you'll not only deepen your expertise across cybersecurity, compliance, and privacy frameworks, but also mentor and be mentored by some of the brightest minds in the industry—an environment built for growth, impact, and continuous learning.

Responsibilities: 

• We are seeking a seasoned GRC leader with deep expertise in cybersecurity frameworks, regulatory compliance, and risk management. The ideal candidate will be a strategic thinker and hands-on contributor, capable of driving security initiatives across the enterprise.

• Demonstrated expertise in completing Security Questionnaires, Risk Assessments, Due Diligence Questionnaires (DDQs), RFIs, and other technical ad hoc requests from clients, regulators, and partners.

• Strong command of GRC frameworks such as NIST CSF, ISO 27001, and COBIT. Proven ability to align technical and administrative controls with regulatory and audit requirements.

• Lead internal and external audits, including SOC 2 Type I/II readiness, SOX ITGC testing, and HIPAA security rule assessments. Coordinate evidence collection and remediation efforts.

Requirements/Education and Experience:

• In-depth experience with regulatory frameworks and standards including SOX, HIPAA, SOC 2, NYDFS Cybersecurity Regulation, GDPR, and PCI-DSS. Must stay current with evolving global cybersecurity laws and compliance obligations.

• Proven ability to lead cross-functional teams, mentor junior engineers, and serve as a subject matter expert in security technologies, tools, and frameworks. Strong communication skills to engage with technical and non-technical stakeholders.

• 5+ years of relevant experience in security engineering and GRC-focused security solutions development.

• Deep understanding of security standards and frameworks such as NIST, ISO 27001, CIS Controls, and industry compliance regulations (NYDFS, GDPR, HIPAA, PCI-DSS).

• Proven ability to manage complex timelines and deliverables, ensuring alignment with organizational goals and regulatory requirements.

• Strong leadership and communication skills, with a track record of engaging stakeholders and guiding security teams toward shared objectives.

#LI-Onsite

#LI-CH1

Candidates should be comfortable with an on-site presence to support collaboration, team leadership, and cross-functional partnership.  

Pay Details:

Candidates should be comfortable with an on-site presence to support collaboration, team leadership, and cross-functional partnership.

Why Join Us:

At Acrisure, we’re building more than a business, we’re building a community where people can grow, thrive, and make an impact. Our benefits are designed to support every dimension of your life, from your health and finances to your family and future.

Making a lasting impact on the communities it serves, Acrisure has pledged more than $22 million through its partnerships with Corewell Health Helen DeVos Children's Hospital in Grand Rapids, Michigan, UPMC Children's Hospital in Pittsburgh, Pennsylvania and Blythedale Children's Hospital in Valhalla, New York.

Employee Benefits

We also offer our employees a comprehensive suite of benefits and perks, including:

• Physical Wellness: Comprehensive medical insurance, dental insurance, and vision insurance; life and disability insurance; fertility benefits; wellness resources; and paid sick time.

• Mental Wellness: Generous paid time off and holidays; Employee Assistance Program (EAP); and a complimentary Calm app subscription.

• Financial Wellness: Immediate vesting in a 401(k) plan; Health Savings Account (HSA) and Flexible Spending Account (FSA) options; commuter benefits; and employee discount programs.

• Family Care: Paid maternity leave and paid paternity leave (including for adoptive parents); legal plan options; and pet insurance coverage.

• … and so much more!

This list is not exhaustive of all available benefits. Eligibility and waiting periods may apply to certain offerings. Benefits may vary based on subsidiary entity and geographic location.

Acrisure is an Equal Opportunity Employer. We consider qualified applicants without regard to race, color, religion, sex, national origin, disability, or protected veteran status. Applicants may request reasonable accommodation by contacting [email protected].

California Residents: Learn more about our privacy practices for applicants by visiting the Acrisure California Applicant Privacy Policy.

Recruitment Fraud: Please visit here to learn more about our Recruitment Fraud Notice.

Welcome, your new opportunity awaits you.