Cyber Risk & Compliance Analyst

Intact Insurance U.S.; Canton (MA); Hybrid; USD 95,000 - 110,000; Full time

Benefits offered by this job

Comprehensive benefits

Job summary

Intact Insurance Specialty Solutions is seeking an IT Risk & Compliance Analyst to join our Corporate IT team on a hybrid schedule in Canton, MA (with options in Boston, Farmington, or Raleigh). The role supports IT risk, GRC, and cybersecurity metrics, collaborating across IT, security, and audit stakeholders while delivering management‑ready reporting.

The ideal candidate has 3–5 years in IT risk or related fields, with familiarity in regulated industries and professional certifications

Qualifications

• 3–5 years IT risk, GRC, or security experience.
• Experience in regulated industries preferred.
• Certifications such as Security+, CISA, CRISC, CISM, CISSP, CGRC, or ITIL preferred but not required.
• Familiarity with the NIST framework and governance, risk, and compliance concepts.

Responsibilities

• Maintain records of IT and cybersecurity risks, controls, owners, evidence requests, action items, dependencies, due dates, exceptions, and remediation status.
• Collect and validate information from control owners and technical teams to support risk reviews and compliance activities.
• Coordinate audit response activities across internal and external auditors in multiple regions and IT, security, and business stakeholders.
• Track audit requests, evidence, responses, findings, remediation actions, retesting, and closure; escalate blockers as needed.
• Develop reports, dashboards, and management‑ready summaries using Excel, PowerPoint, SharePoint and other platforms.

Skills

Analytical

Organizational skills

Stakeholder communication

Cybersecurity knowledge

GRC experience

Audit coordination

Education

Management, Audit, Accounting or related field

Tools

Excel

PowerPoint

SharePoint

Ticketing systems

Reporting platforms

Job description

Intact Insurance Specialty Solutions is seeking an IT Risk & Compliance Analyst to join our Corporate IT team on a hybrid schedule in Canton, MA (with options in Boston, Farmington, or Raleigh). The role supports IT risk, GRC, and cybersecurity metrics, collaborating across IT, security, and audit stakeholders while delivering management‑ready reporting.

The ideal candidate has 3–5 years in IT risk or related fields, with familiarity in regulated industries and professional certifications