GRC Analyst – SOC2/SOX | Risk, Compliance & Security

Acrisure Trade Credit; Atlanta (GA); On-site; USD 85,000 - 110,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k) plan

Paid time off

Job summary

Acrisure is seeking a detail-oriented GRC Analyst to join our team in Atlanta. You will support governance, risk, and compliance activities, assist with audits, and help maintain HIPAA, GDPR, SOC 2, and SOX ITGC compliance across systems and vendors.

You will collaborate with multiple departments to ensure security solutions protect data and meet regulatory requirements, while staying current with evolving cybersecurity laws and obligations.

Qualifications

• 2+ years of relevant experience in GRC-focused security activities.
• Understanding of security standards and frameworks such as NIST, ISO 27001, CIS Controls, and industry compliance regulations (NYDFS, GDPR, HIPAA, PCI-DSS).
• Bachelor’s degree (or equal experience) in an Information Systems Assurance or related.
• CRISC, CISSP, CISA, CEH certifications are preferred.

Responsibilities

• Support governance, risk, and compliance (GRC) activities by assisting with cybersecurity framework implementation and regulatory compliance efforts.
• Participate in internal and external audits by coordinating evidence collection, tracking remediation efforts, and supporting readiness for SOC 2, SOX ITGC, and HIPAA assessments.
• Perform user access reviews for assigned applications and systems.
• Assist in maintaining compliance with regulatory standards including SOX, HIPAA, SOC 2, GDPR, and PCI-DSS.

Skills

GRC experience

Regulatory knowledge

Security awareness

Communication skills

Education

Bachelor’s degree in Information Systems Assurance

Job description

Acrisure is seeking a detail-oriented GRC Analyst to join our team in Atlanta. You will support governance, risk, and compliance activities, assist with audits, and help maintain HIPAA, GDPR, SOC 2, and SOX ITGC compliance across systems and vendors.

You will collaborate with multiple departments to ensure security solutions protect data and meet regulatory requirements, while staying current with evolving cybersecurity laws and obligations.