IT Risk & Compliance Analyst (Hybrid) – GRC & Audit

Intact Insurance Specialty Solutions; Canton (MA); Hybrid; USD 75.000 - 110.000; Vollzeit

Benefits dieser Stelle

Medical insurance

Paid time off

401(k) plan

Mental health support

Zusammenfassung

Intact Insurance Specialty Solutions is seeking an IT Risk & Compliance Analyst to support IT risk, GRC, and audit activities in a hybrid role across multiple U.S. offices. You will collect evidence, track remediation, and report on cybersecurity metrics to leadership.

The ideal candidate is organized, analytical, and quick to learn new cybersecurity domains, collaborating across IT, security, and business teams to ensure controls meet regulatory expectations.

Qualifikationen

• Three to five years of IT risk, GRC, information security, or a related function.
• Experience in regulated industries is preferred.
• Certifications such as Security+, CISA, CRISC, CISM, CISSP are a plus.

Aufgaben

• Maintain organized records of IT and cybersecurity risks, controls, owners, evidence requests, action items, and remediation status.
• Collect and validate information from control owners and technical teams for risk reviews and compliance activities.
• Coordinate audit responses with internal and external auditors across regions and stakeholders.
• Track audit requests, evidence, findings, remediation actions, and close gaps.
• Develop reports and dashboards using Excel, PowerPoint, SharePoint and other tools.
• Analyze trends, gaps, and remediation progress for leadership and risk committees.
• Coordinate application security testing for SaaS, web, mobile, API, and cloud apps.

Kenntnisse

IT risk

GRC

Information security

IT audit

Security operations

Ausbildung

Related field experience

Tools

Excel

PowerPoint

SharePoint

Ticketing systems

Jobbeschreibung

Intact Insurance Specialty Solutions is seeking an IT Risk & Compliance Analyst to support IT risk, GRC, and audit activities in a hybrid role across multiple U.S. offices. You will collect evidence, track remediation, and report on cybersecurity metrics to leadership.

The ideal candidate is organized, analytical, and quick to learn new cybersecurity domains, collaborating across IT, security, and business teams to ensure controls meet regulatory expectations.