Strategic Tech Risk & Compliance Analyst

001 Brown & Brown, Inc; Town of Texas (WI); Hybrid; USD 85,000 - 105,000; Full time

Benefits offered by this job

Health Benefits: Medical/Rx, Dental, V

401k; ESPP; Student Loan Assistance

Mental Health & Wellness programs

Paid Time Off and Holidays

Job summary

Brown & Brown in Plano, TX, is seeking a Technology Risk & Compliance Analyst to embed risk and regulatory alignment into delivery across applications, infrastructure, and data environments.

The role partners with portfolio leaders, delivery teams, security, and business stakeholders to identify and remediate risks, enforce policies, and support audits. Travel up to 30% may be required.

Qualifications

• Bachelor's degree in IT, cybersecurity, business, or related field.
• 3–7 years of IT risk, compliance, audit, or cybersecurity experience.
• Strong working knowledge of GRC frameworks (e.g., NIST, ISO 27001, COBIT).
• Knowledge of regulatory standards (SOX, SOC, GDPR, or similar).
• Experience with risk assessment, control design, and audit support.
• Ability to translate technical risk into business impact and executive-level messaging.
• Strong collaboration and stakeholder management across technology and business teams.
• High attention to detail with disciplined documentation practices.
• Able to travel up to 30%.

Responsibilities

• Identify, assess, and document technology risks across projects, products, and platforms within the Retail portfolio.
• Facilitate risk prioritization based on impact, regulatory exposure, and risk appetite.
• Conduct risk assessments for new initiatives, including M&A integrations.
• Partner with project managers and product teams to embed risk mitigation into delivery plans.
• Ensure risk mitigation aligns to enterprise risk appetite and portfolio priorities.
• Monitor risk exposure and track remediation through completion.
• Ensure alignment with internal policies and external regulatory requirements (SOX, SOC, data privacy).
• Support IT governance, risk, and compliance (GRC) frameworks.
• Evaluate and ensure policies, standards, procedures are fit for purpose.
• Recommend updates to policies based on regulatory changes and audits.
• Maintain compliance documentation, control narratives, and evidence repositories.
• Monitor adherence to policies and SOPs across the portfolio.
• Support internal and external audit activities and remediation tracking.
• Partner with Audit to support SOX compliance, evidence validation, and remediation.
• Assess IT controls and identify gaps across applications, infrastructure, and processes.
• Strengthen control design and execution with control owners.
• Drive timely closure of audit findings and deficiencies.
• Collaborate with Vendor Management to address third-party risks.
• Report findings to governance forums and leadership with actionable insights.
• Track KRIs, control effectiveness, and remediation progress.
• Identify opportunities to improve GRC processes and tooling.

Skills

IT risk

Compliance

Audit

Cybersecurity

Stakeholder mgmt

Communication

Documentation

Travel up to 30%

Education

Bachelor's degree in IT, cybersecurity, business, or related field

Job description

Brown & Brown in Plano, TX, is seeking a Technology Risk & Compliance Analyst to embed risk and regulatory alignment into delivery across applications, infrastructure, and data environments.

The role partners with portfolio leaders, delivery teams, security, and business stakeholders to identify and remediate risks, enforce policies, and support audits. Travel up to 30% may be required.