Compliance Specialist, GRC Compliance & Risk

HUB International•Chicago, IL

21h•$90,000 - $120,000

About The Position

HUB International is seeking a Compliance Analyst to join its Governance, Risk and Compliance (GRC) team within Information Security. Reporting to the First Line Compliance Manager, the role supports the Compliance Department’s compliance and risk initiatives and helps grow the Compliance business unit within Information Security. It is responsible for developing, monitoring, and maintaining an Enterprise Risk Program to help ensure the Company achieves optimum compliance with regulatory requirements. The role provides broad GRC program support, including policy work, departmental initiatives, and cross-functional compliance activities. It manages workstreams from intake through resolution; validates data across software platforms; develops dashboards, trend reports, and other visual summaries; supports control design assessment, operating-effectiveness testing, and control maintenance; and monitors, tracks, and processes regulatory requests end-to-end. The analyst also develops tracking and reporting mechanisms for regulatory activities, asset management, and program health, and contributes to evolving risk-management priorities in a dynamic compliance environment.

Requirements

Minimum BA/BS or equivalent work experience in governance and/or compliance, information systems, or a related field.
Candidates with 5 or more years of relevant GRC experience and demonstrated tool proficiency may be considered in lieu of a degree.
Process expertise in GRC areas such as risk management, compliance and regulation, controls automation, or continuous controls monitoring.
Intellectual curiosity, analytical skills, sound judgment, and healthy skepticism when addressing complex or ambiguous matters.
Strong written and verbal communication skills, with the ability to solve problems proactively and engage stakeholders across the organization.
Understanding of IT environments, risk, and assessment and auditing methodologies.
Working knowledge of relevant regulatory frameworks and standards, including ISO 27001, SSAE 16/18, and CCPA/CPRA.
Ability to manage projects and workstreams across multiple teams, with strong planning, organization, and project-management skills.
Ability to prioritize work, track deliverables to completion, and meet deadlines across concurrent workstreams.
Ability to work independently and collaboratively within a team.
Proficiency with Microsoft 365 tools, including Teams, SharePoint, and Visio.
Willingness to learn new systems.

Nice To Haves

Relevant certifications such as CRCM, CISA, CRISC, or equivalent.
Familiarity or hands-on experience with GRC, regulatory intake, or workflow-management platforms such as OneTrust, Optro, ServiceNow, or Jira.
Working knowledge of SOC 2 controls.

Responsibilities

Support the Compliance Manager and GRC department with policy work, departmental initiatives, and cross-functional compliance activities.
Manage workstreams from intake through resolution, tracking open items and driving tasks to completion.
Review, analyze, and validate data across software platforms, identifying discrepancies and supporting data-driven decisions.
Synthesize compliance and risk data into dashboards, trend reports, and visual summaries for stakeholders.
Assess control design, test operating effectiveness, and support ongoing control maintenance.
Monitor, track, and process regulatory requests end-to-end across applicable jurisdictions.
Build and maintain tracking mechanisms and reporting artifacts for regulatory activities, asset management, and program health.
Contribute to risk-management workstreams and emerging priorities as the compliance program evolves.