GRC Analyst jobs in United States
cer-icon
Apply on Employer Site
company-logo

Acrisure · 2 months ago

GRC Analyst

Auris is a payroll and HR partner dedicated to small and medium-sized businesses, recently acquired by Acrisure. The GRC Analyst will build, monitor, and improve frameworks to ensure compliance and manage risks across the organization, working closely with various teams to enhance governance practices.

Financial ServicesInsuranceInsurTech
check
H1B Sponsor Likelynote

Responsibilities

Maintain and evolve the Information Security Governance Framework aligned with NIST, ISO 27001, SOC 2, PCI-DSS, and SOX
Map controls across frameworks to identify overlaps, gaps, and automation opportunities
Draft and update policies, standards, and procedures
Monitor control effectiveness through dashboards and continuous checks
Identify, assess, and report technology and cybersecurity risks
Facilitate risk assessments for products, vendors, and projects; track mitigation plans
Maintain risk register with likelihood, impact, and residual risk metrics
Produce risk reports and heatmaps for leadership
Lead or support audits (SOC, NYDFS, Texas DOB); coordinate evidence and interviews
Maintain audit calendar and ensure timely control testing
Track remediation of findings and report status
Manage vendor security reviews: questionnaires, evidence validation, risk scoring
Oversee security due diligence for acquisitions and critical partners
Maintain vendor risk register and report exposure
Publish dashboards on control health, risk posture, and compliance
Communicate risk and compliance expectations clearly to stakeholders
Support security awareness and training campaigns

Qualification

NIST complianceISO 27001SOC 2PCI-DSSSOX complianceRisk assessmentControl effectiveness monitoringPolicy draftingCuriosityPrecisionCollaborationCommunication

Required

Maintain and evolve the Information Security Governance Framework aligned with NIST, ISO 27001, SOC 2, PCI-DSS, and SOX
Map controls across frameworks to identify overlaps, gaps, and automation opportunities
Draft and update policies, standards, and procedures
Monitor control effectiveness through dashboards and continuous checks
Identify, assess, and report technology and cybersecurity risks
Facilitate risk assessments for products, vendors, and projects; track mitigation plans
Maintain risk register with likelihood, impact, and residual risk metrics
Produce risk reports and heatmaps for leadership
Lead or support audits (SOC, NYDFS, Texas DOB); coordinate evidence and interviews
Maintain audit calendar and ensure timely control testing
Track remediation of findings and report status
Manage vendor security reviews: questionnaires, evidence validation, risk scoring
Oversee security due diligence for acquisitions and critical partners
Maintain vendor risk register and report exposure
Publish dashboards on control health, risk posture, and compliance
Communicate risk and compliance expectations clearly to stakeholders
Support security awareness and training campaigns

Benefits

Comprehensive medical insurance, dental insurance, and vision insurance
Life and disability insurance
Fertility benefits
Wellness resources
Paid sick time
Generous paid time off and holidays
Employee Assistance Program (EAP)
Complimentary Calm app subscription
Immediate vesting in a 401(k) plan
Health Savings Account (HSA) and Flexible Spending Account (FSA) options
Commuter benefits
Employee discount programs
Paid maternity leave and paid paternity leave (including for adoptive parents)
Legal plan options
Pet insurance coverage

Company

Acrisure

company-logo
Acrisure offers financial services solutions for insurance, reinsurance, real estate, cyber services, and asset and wealth management.

H1B Sponsorship

Acrisure has a track record of offering H1B sponsorships. Please note that this does not guarantee sponsorship for this specific role. Below presents additional info for your reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (1)
2022 (2)

Funding

Current Stage
Late Stage
Total Funding
$11.37B
Key Investors
Bain Capital Special SituationsAbu Dhabi Investment AuthorityBDT & MSD Partners
2025-06-06Debt Financing· $550M
2025-05-20Private Equity· $2.1B
2024-06-05Debt Financing· $1.6B

Leadership Team

leader-logo
Greg Williams
Co-Founder, Chairman & CEO
linkedin
leader-logo
Mark Wassersug
Chief Technology Officer
linkedin
Company data provided by crunchbase