GRC Compliance Specialist

About the Role

HUB International is seeking a Compliance Analyst to join our Governance, Risk and Compliance (GRC) team within Information Security. Reporting to the First Line Compliance Manager, this role will assist with the Compliance Department’s overall compliance and risk initiatives and help grow the Compliance business unit within Information Security. The role is responsible for developing, monitoring, and maintaining an Enterprise Risk Program that ensures the Company achieves optimum compliance with all regulatory requirements.

Key Responsibilities

• Provide broad support across the Compliance Manager and GRC department, contributing to policy work, departmental initiatives, and cross-functional compliance activities.
• Manage workstreams from intake through resolution, tracking open items, driving tasks to completion, and maintaining accountability across complex, multi-step processes.
• Review, analyze, and validate data across software platforms to surface discrepancies, assess accuracy, and support data-driven decision-making.
• Synthesize compliance and risk data into clear, meaningful outputs, including dashboards, trend reports, and visual summaries.
• Assess internal control design, test operating effectiveness, and support ongoing control maintenance.
• Monitor, track, and process consumer rights requests and regulatory workflows end-to-end across applicable jurisdictions.
• Build and maintain tracking mechanisms and reporting artifacts to support departmental visibility into regulatory activities, asset management, and program health.

Requirements & Tech Stack

• GRC program support
• End-to-end ownership and follow-through
• Data validation and quality assurance
• Data analysis and visualization
• Internal controls and audit readiness
• Regulatory request management
• GRC and compliance platform proficiency (Experience with OneTrust, Optro, ServiceNow, or Jira is a plus; ability and willingness to learn new platforms is essential.)
• Reporting and metrics development
• Analytical skepticism and intellectual curiosity
• Adaptability and cross-functional collaboration
• Proficiency with Microsoft 365 tools including Teams, SharePoint, and Visio.
• Familiarity with GRC or compliance platforms (OneTrust, Optro, ServiceNow, Jira) preferred.
• Working knowledge of SOC 2 and ISO 27001 control frameworks.
• Understanding of consumer rights frameworks and regulatory request workflows.

Qualifications

• Minimum BA/BS or equivalent work experience in governance and/or compliance, information systems, or a related field.
• Candidates with 5 or more years of relevant GRC experience and demonstrated tool proficiency may be considered in lieu of a degree.
• Process expertise in GRC areas is necessary (e.g., risk management, compliance & regulation, controls automation, continuous controls monitoring).
• Intellectual curiosity and analytical skills in areas of high complexity; sound judgment and a healthy skepticism.
• Strong written and verbal communication skills with the ability to proactively solve problems and engage effectively with stakeholders.
• Understanding of IT environments, risk, and assessment and auditing methodologies.
• Working knowledge of relevant regulatory frameworks and standards, including ISO 27001, SSAE 16/18, CCPA/CPRA.
• Ability to manage projects and workstreams across multiple teams; strong planning, organization, and project management skills.
• Ability to prioritize assigned work, track deliverables to completion, and meet deadlines across concurrent workstreams.
• Ability to work independently and collaboratively within a team environment.
• Willingness to learn new systems required.
• Relevant professional certifications (CISA, CRISC, CRCM, or equivalent) are a plus.