GRC Analyst: Cybersecurity, Audits & Compliance

Acrisure; Grand Rapids (MI); On-site; USD 75,000 - 110,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k) plan

HSA/FSA options

Paid time off

Job summary

Acrisure in Grand Rapids, MI is seeking a detail-oriented GRC Analyst to support governance, risk, and compliance initiatives. You will assist with SOC 2, SOX ITGC, HIPAA assessments, and security framework adoption across departments, vendors, and systems.

You should have 2+ years in GRC security, familiarity with NIST/ISO 27001, and relevant certifications; bachelor’s in a related field is preferred. This role offers hands-on growth in cybersecurity and privacy compliance.

Qualifications

• 2+ years of experience in GRC-focused security.
• Understanding of security standards and regulatory requirements (NIST, ISO 27001, CIS Controls, GDPR, HIPAA, PCI-DSS).
• Bachelor’s degree (or equivalent) in Information Systems Assurance or related.

Responsibilities

• Assist with cybersecurity framework implementation and regulatory compliance efforts.
• Coordinate evidence collection and remediation tracking for SOC 2, SOX ITGC, and HIPAA assessments.
• Perform user access reviews for assigned applications and systems.
• Maintain awareness of evolving cybersecurity laws and obligations across regulatory standards.
• Collaborate with cross-functional teams to support security initiatives and stakeholder communication.

Skills

GRC

Cybersecurity

SOC 2

SOX ITGC

HIPAA

Regulatory compliance

Education

Bachelor’s degree in Information Systems Assurance

CRISC

CISSP

CISA

CEH

Job description

Acrisure in Grand Rapids, MI is seeking a detail-oriented GRC Analyst to support governance, risk, and compliance initiatives. You will assist with SOC 2, SOX ITGC, HIPAA assessments, and security framework adoption across departments, vendors, and systems.

You should have 2+ years in GRC security, familiarity with NIST/ISO 27001, and relevant certifications; bachelor’s in a related field is preferred. This role offers hands-on growth in cybersecurity and privacy compliance.