Cyber Risk & GRC Analyst (Hybrid)

Intact Specialty Solutions; Canton, Boston, Farmington (MA, MA, CT); Híbrido; USD 95.000 - 110.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Medical, Dental, Vision insurance

Paid time off

401(k) savings plan

Mental health support programs

Life and disability insurance

Parental leave

Voluntary benefits

Descripción de la vacante

Intact Insurance Specialty Solutions in the United States (Canton, MA area) is seeking an IT Risk & Compliance Analyst to join our Corporate IT team on a hybrid schedule. The role supports IT risk, GRC, cybersecurity metrics, audit coordination, and remediation tracking across multiple regions, translating technical information into clear management-ready reporting.

The ideal candidate has 3–5 years in IT risk or information security, knowledge of NIST-based terminology, and strong data analysis

Formación

• Three to five years of IT risk, GRC, information security, or related functions.
• Experience in regulated industries is preferred.
• Certifications such as Security+, CISA, CRISC, CISM are a plus but not required.

Responsabilidades

• Maintain organized records of IT and cybersecurity risks, controls, owners, and remediation status.
• Coordinate audit response activities across internal and external auditors in multiple regions.
• Develop management-ready reports and dashboards using Excel, PowerPoint, and SharePoint.
• Collect, organize, and analyze cybersecurity and IT risk metrics across multiple domains.
• Support application security governance and testing coordination for various applications.

Conocimientos

IT risk management

GRC practices

Cybersecurity

Data analysis

Report writing

Stakeholder communication

Educación

Bachelor's degree in a related field

Herramientas

Excel

PowerPoint

SharePoint

Descripción del empleo

Intact Insurance Specialty Solutions in the United States (Canton, MA area) is seeking an IT Risk & Compliance Analyst to join our Corporate IT team on a hybrid schedule. The role supports IT risk, GRC, cybersecurity metrics, audit coordination, and remediation tracking across multiple regions, translating technical information into clear management-ready reporting.

The ideal candidate has 3–5 years in IT risk or information security, knowledge of NIST-based terminology, and strong data analysis