Compliance Specialist, GRC Compliance & Risk

5H0 Hub International Limited; Chicago (IL); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Health benefits

401(k) matching

Generous paid time off

Parental leave

Wellbeing program

Job summary

HUB International is seeking a Compliance Analyst to join the Governance, Risk and Compliance team within Information Security. You will assist with enterprise risk initiatives, develop and monitor an Enterprise Risk Program, and support regulatory requests across jurisdictions.

The role emphasizes data validation, cross-functional collaboration, and proactive problem solving in a dynamic control environment. Prior GRC experience and relevant certifications are valued.

Qualifications

• Minimum BA/BS or equivalent in governance/compliance or related field.
• 5+ years GRC experience preferred; certifications are a plus.
• Experience with SOC 2, ISO 27001 and regulatory frameworks.

Responsibilities

• Support and grow the GRC program within Information Security.
• Manage end-to-end compliance and risk initiatives across the enterprise.
• Develop, monitor, and maintain an Enterprise Risk Program.
• Create dashboards and reports to communicate status to stakeholders.

Skills

GRC

SOC 2

ISO 27001

Regulatory requests

Data analysis

Dashboards

Cross-functional collaboration

Education

BA/BS or equivalent

5+ years GRC experience

Certifications (CRISC/CRCM/CISA)

Tools

OneTrust

Optro

ServiceNow

Jira

Microsoft 365 (Teams, SharePoint, Visio)

Job description

A path for every ambition. At HUB, we believe the best work happens when people are given real space to grow and then given the autonomy to exercise it. We power progress and protect ambition: for the clients who count on us, and equally for the people who make that possible every day. We’re creative thinkers and determined doers, guided by values that show up in how we work together: with empathy, adaptability, accountability and a genuine commitment to one another’s success. We foster bold ideas, celebrate curiosity and share what we know. Because when people grow, the work they do grows with them. Our purpose is deeply human: to help people navigate the world on their terms, at their speed, toward their future. We hold that same commitment to the people building careers here. Whether you’re starting out or leveling up, you’ll find the resources to evolve, the support to take on more and a team ready to back you at every stage. Your ambition has a home here.

Job Description A path for every ambition. At HUB, we believe the best work happens when people are given real space to grow and then given the autonomy to exercise it. We power progress and protect ambition: for the clients who count on us, and equally for the people who make that possible every day. We’re creative thinkers and determined doers, guided by values that show up in how we work together: with empathy, adaptability, accountability and a genuine commitment to one another’s success. We foster bold ideas, celebrate curiosity and share what we know. Because when people grow, the work they do grows with them. Our purpose is deeply human: to help people navigate the world on their terms, at their speed, toward their future. We hold that same commitment to the people building careers here. Whether you’re starting out or leveling up, you’ll find the resources to evolve, the support to take on more and a team ready to back you at every stage. Your ambition has a home here.

HUB is currently seeking a Compliance Analyst to join our Governance, Risk and Compliance (GRC) team within Information Security.

About the Position:

Reporting to the First Line Compliance Manager, the Compliance Analyst will assist with the Compliance Department’s overall compliance and risk initiatives and help grow the Compliance business unit within Information Security. The role is responsible for developing, monitoring, and maintaining an Enterprise Risk Program that ensures the Company achieves optimum compliance with all regulatory requirements. The ideal candidate brings prior Governance, Compliance and/or Risk experience, a naturally inquisitive mindset, and the ability to communicate effectively and thrive in an ever-changing control environment.

Key Competencies and Areas of Focus:

GRC program support: Ability to provide broad support across the Compliance Manager and GRC department, including contributing to policy work, departmental initiatives, and cross-functional compliance activities.

End-to-end ownership and follow-through: Demonstrated ability to manage workstreams from intake through resolution — tracking open items, driving tasks to completion, and maintaining accountability across complex, multi-step processes.

Data validation and quality assurance: Skill in reviewing, analyzing, and validating data across software platforms to surface discrepancies, assess accuracy, and support data-driven decision-making.

Data analysis and visualization: Ability to synthesize compliance and risk data into clear, meaningful outputs — including dashboards, trend reports, and visual summaries that communicate status and patterns to stakeholders at varying levels.

Internal controls and audit readiness: Working knowledge of SOC 2 and ISO 27001 control frameworks, with the ability to assess control design, test operating effectiveness, and support ongoing control maintenance.

Regulatory request management: Understanding of consumer rights frameworks and regulatory request workflows, with the ability to independently monitor, track, and process requests end-to-end across applicable jurisdictions.

GRC and compliance platform proficiency: Hands-on experience with GRC, regulatory intake, or workflow management platforms. Experience with tools such as OneTrust, Optro, ServiceNow, or Jira is a plus; ability and willingness to learn new platforms is essential.

Reporting and metrics development: Aptitude for building and maintaining tracking mechanisms and reporting artifacts that support departmental visibility into regulatory activities, asset management, and program health.

Analytical skepticism and intellectual curiosity: A natural tendency to question assumptions, probe data for inconsistencies, and dig deeper when something doesn't add up — especially in ambiguous or evolving compliance landscapes.

Adaptability and cross-functional collaboration: Comfort operating in a dynamic, maturing compliance environment, with the ability to contribute across risk management workstreams and take on emerging priorities as the program evolves.

Qualifications:

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill and/or ability required.

Education Level and Experience Required:

Minimum BA/BS or equivalent work experience in governance and/or compliance, information systems, or a related field.

Candidates with 5 or more years of relevant GRC experience and demonstrated tool proficiency may be considered in lieu of a degree.

Relevant certifications such as CRCM, CISA, or CRISC are a plus.

Process expertise in GRC areas is necessary (e.g., risk management, compliance & regulation, controls automation, continuous controls monitoring).

Required Knowledge and Capabilities:

Intellectual curiosity and analytical skills in areas of high complexity; sound judgment and a healthy skepticism when resolving ambiguous or complex matters.

Strong written and verbal communication skills with the ability to proactively solve problems and engage effectively with stakeholders across the organization.

Understanding of IT environments, risk, and assessment and auditing methodologies.

Working knowledge of relevant regulatory frameworks and standards, including ISO 27001, SSAE 16/18, CCPA/CPRA.

Ability to manage projects and workstreams across multiple teams, strong planning, organization, and project management skills.

Ability to prioritize assigned work, track deliverables to completion, and meet deadlines across concurrent workstreams.

Ability to work independently and collaboratively within a team environment.

Proficiency with Microsoft 365 tools including Teams, SharePoint, and Visio; familiarity with GRC or compliance platforms (OneTrust, Optro, ServiceNow, Jira) preferred; willingness to learn new systems required.

Relevant professional certifications (CISA, CRISC, CRCM, or equivalent) are a plus.

Pay transparency

The expected salary range for this position is $90,000- $120,000 and will be impacted by factors such as the successful candidate’s skills, experience and working location, as well as the specific position’s business line, scope and level.

• health/dental/vision/life/disability insurance, FSA, HSA and 401(k) accounts, paid-time-off benefits such as vacation, sick, and personal days, and eligible bonuses, equity and commissions for some positions.

The HUB difference

HUB International is one of North America’s largest insurance brokers, delivering risk management, insurance, employee benefits, retirement and wealth management solutions to businesses and individuals across the United States and Canada — through locally led teams backed by national expertise, giving you the agility of a local partner and the reach of a global organization.

What we offer you

We invest in your growth. HUB offers structured training, licensing support, and ongoing development opportunities designed to accelerate your career.

Benefits and programs vary based on employment status, role, location, and applicable eligibility requirements.

• Competitive pay with comprehensive health benefits, retirement savings matching, and company-paid life and disability plans
• Generous paid time off, paid parental leave and a wellbeing program designed to support real work/life balance
• A collaborative, high-performing culture with meaningful engagement, community impact through HUB Gives and genuine room to grow your career

Equal Employment Opportunity:

HUB International Limited is an Equal Opportunity