Strategic Tech Risk & Compliance Analyst

001 Brown & Brown, Inc; United States; Remote; USD 85,000 - 105,000; Full time

Benefits offered by this job

Health benefits

401k plan

Student loan assistance

Tuition reimbursement

Paid time off

Job summary

Brown & Brown, Inc. seeks a Technology Risk & Compliance Analyst to embed risk and regulatory controls within technology delivery in Plano, TX.

You will partner with leaders, delivery teams, security, and stakeholders to identify risks, enforce standards, and drive remediation across applications, infrastructure, and data environments. Role emphasizes SOX, SOC controls, data privacy, and GRC oversight, with a focus on aligning to regulatory requirements and enterprise risk appetite while

Qualifications

• Bachelor's degree in IT, cybersecurity, business, or related field.
• 3–7 years of experience in IT risk, compliance, audit, or cybersecurity.
• Knowledge of GRC frameworks (NIST, ISO 27001, COBIT).
• Familiarity with SOX, SOC, GDPR or similar.

Responsibilities

• Identify, assess, and document technology risks across projects, products, and platforms.
• Collaborate with project teams to integrate risk mitigation into delivery plans and milestones.
• Support IT governance, risk, and compliance (GRC) frameworks and controls.
• Assist audit activities and remediation tracking to ensure timely closure.

Skills

IT risk management

Regulatory compliance

Audit support

Stakeholder management

Communication

Education

Bachelor's degree in IT, cybersecurity, business, or related field

Tools

NIST framework

ISO 27001

COBIT

Job description

Brown & Brown, Inc. seeks a Technology Risk & Compliance Analyst to embed risk and regulatory controls within technology delivery in Plano, TX.

You will partner with leaders, delivery teams, security, and stakeholders to identify risks, enforce standards, and drive remediation across applications, infrastructure, and data environments. Role emphasizes SOX, SOC controls, data privacy, and GRC oversight, with a focus on aligning to regulatory requirements and enterprise risk appetite while