Governance, Risk & Compliance Analyst

Acrisure; Grand Rapids (MI); On-site; USD 75,000 - 110,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k) plan

HSA/FSA options

Paid time off

Job summary

Acrisure in Grand Rapids, MI is seeking a detail-oriented GRC Analyst to support governance, risk, and compliance initiatives. You will assist with SOC 2, SOX ITGC, HIPAA assessments, and security framework adoption across departments, vendors, and systems.

You should have 2+ years in GRC security, familiarity with NIST/ISO 27001, and relevant certifications; bachelor’s in a related field is preferred. This role offers hands-on growth in cybersecurity and privacy compliance.

Qualifications

• 2+ years of experience in GRC-focused security.
• Understanding of security standards and regulatory requirements (NIST, ISO 27001, CIS Controls, GDPR, HIPAA, PCI-DSS).
• Bachelor’s degree (or equivalent) in Information Systems Assurance or related.

Responsibilities

• Assist with cybersecurity framework implementation and regulatory compliance efforts.
• Coordinate evidence collection and remediation tracking for SOC 2, SOX ITGC, and HIPAA assessments.
• Perform user access reviews for assigned applications and systems.
• Maintain awareness of evolving cybersecurity laws and obligations across regulatory standards.
• Collaborate with cross-functional teams to support security initiatives and stakeholder communication.

Skills

GRC

Cybersecurity

SOC 2

SOX ITGC

HIPAA

Regulatory compliance

Education

Bachelor’s degree in Information Systems Assurance

CRISC

CISSP

CISA

CEH

Job description

About Acrisure

A global fintech leader, Acrisure empowers millions of ambitious businesses and individuals with the right solutions to grow boldly forward. Bringing cutting-edge technology and top-tier human support together, we connect clients with customized solutions across a range of insurance, reinsurance, payroll, benefits, cybersecurity, mortgage services – and more.

About Acrisure

A global fintech leader, Acrisure empowers millions of ambitious businesses and individuals with the right solutions to grow boldly forward. Bringing cutting-edge technology and top-tier human support together, we connect clients with customized solutions across a range of insurance, reinsurance, payroll, benefits, cybersecurity, mortgage services – and more. In the last twelve years, Acrisure has grown in revenue from $38 million to almost $5 billion and employs over 19,000 colleagues in more than 20 countries. Acrisure was built on entrepreneurial spirit. Prioritizing leadership, accountability, and collaboration, we equip our teams to work at the highest levels possible.

Job Summary

We are seeking a detail-oriented and motivated GRC Analyst to join our growing team. The ideal candidate will have 2+ years of experience in supporting governance, risk, and compliance initiatives. This includes assisting with client/prospect compliance questionnaires, user access reviews, SOC1 and SOC2 audits, Sarbanes-Oxley IT general controls audits, and internal risk reviews. You will help maintain awareness of relevant cybersecurity regulations and contribute to implementing audit, governance, risk, and compliance (GRC) frameworks. As a GRC Analyst, you will collaborate across departments to ensure security solutions protect internal systems, vendor environments, and customer data while also aligning with compliance requirements. Join one of the fastest-growing companies in the world, where you’ll gain hands‑on experience with cybersecurity, compliance, and privacy frameworks, and work alongside industry experts in an environment built for growth, impact, and continuous learning.

Responsibilities

• Support governance, risk, and compliance (GRC) activities by assisting with cybersecurity framework implementation and regulatory compliance efforts.
• Participate in internal and external audits by coordinating evidence collection, tracking remediation efforts, and supporting readiness for SOC 2, SOX ITGC, and HIPAA assessments.
• Performing user access reviews for assigned applications and systems.
• Assist in maintaining compliance with regulatory standards including SOX, HIPAA, SOC 2, GDPR, and PCI-DSS, while staying informed about evolving cybersecurity laws and obligations.
• Collaborate with cross-functional teams to support security initiatives and communicate effectively with both technical and non-technical stakeholders.

Requirements

• Able to work independently and enjoy a high degree of interaction with team members
• Ability to contribute to a collaborative environment by consistently demonstrating teamwork, high motivation, positive behavior and effort to achieve goals and objectives
• Self-motivated and driven
• Maintain a sense of urgency and ability to work with and meet deadlines
• Demonstrate effective written and verbal communication, including the ability actively listen, and problem solve with minimal assistance
• Demonstrate excellent time management and prioritization skills
• Attention to detail and commitment to a high level of accuracy
• The ability to multitask, prioritize, work independently, and use discretion surrounding sensitive information
• Ability to maintain a professional demeanor and positive attitude

Education and Experience

• 2+ years of relevant experience in GRC-focused security activities.
• Understanding of security standards and frameworks such as NIST, ISO 27001, CIS Controls, and industry compliance regulations (NYDFS, GDPR, HIPAA, PCI-DSS).
• Proven ability to manage complex timelines and deliverables, ensuring alignment with organizational goals and regulatory requirements.
• Bachelor’s degree (or equal experience) in an Information Systems Assurance or related.
• Preferred Certifications:
  • CRISC (Certified in Risk and Information Systems Control)
  • CISSP (Certified Information Systems Security Professional)
  • CISA (Certified Information Systems Auditor)
  • CEH (Certified Ethical Hacker)

Candidates should be comfortable with an on-site presence to support collaboration, team leadership, and cross‑functional partnership.

Why Join Us

At Acrisure, we’re building more than a business, we’re building a community where people can grow, thrive, and make an impact. Our benefits are designed to support every dimension of your life, from your health and finances to your family and future. Making a lasting impact on the communities it serves, Acrisure has pledged more than $22 million through its partnerships with Corewell Health Helen DeVos Children’s Hospital in Grand Rapids, Michigan, UPMC Children’s Hospital in Pittsburgh, Pennsylvania and Blythedale Children’s Hospital in Valhalla, New York.

Employee Benefits

We also offer our employees a comprehensive suite of benefits and perks, including:

• Physical Wellness: Comprehensive medical insurance, dental insurance, and vision insurance; life and disability insurance; fertility benefits; wellness resources; and paid sick time.
• Mental Wellness: Generous paid time off and holidays; Employee Assistance Program (EAP); and a complimentary Calm app subscription.
• Financial Wellness: Immediate vesting in a 401(k) plan; Health Savings Account (HSA) and Flexible Spending Account (FSA) options; commuter benefits; and employee discount programs.
• Family Care: Paid maternity leave and paid paternity leave (including for adoptive parents); legal plan options; and pet insurance coverage.
• … and so much more!

This list is not exhaustive of all available benefits. Eligibility and waiting periods may apply to certain offerings. Benefits may vary based on subsidiary entity and geographic location.

Acrisure is an Equal Opportunity Employer.

We consider qualified applicants without regard to race, color, religion, sex, national origin, disability, or protected veteran status. Applicants may request reasonable accommodation by contacting [e-mail].

Final candidates will be required to complete post-offer verification processes related to the role and in accordance with applicable laws.

California Residents

Learn more about our privacy practices for applicants by visiting the Acrisure California Applicant Privacy Policy.