Talent.com
GRC Analyst
GRC AnalystAcrisure • Oklahoma City, Oklahoma, USA
[error_messages.no_longer_accepting]
GRC Analyst

GRC Analyst

Acrisure • Oklahoma City, Oklahoma, USA
[job_card.30_days_ago]
[job_preview.job_type]
  • [job_card.full_time]
[job_card.job_description]

Department : Information Security

Reports to : Senior Director Information Security

Role Summary

You will be a hands-on GRC professional who builds monitors and improves the frameworks that keep our organization compliant resilient and risk informed. Youll work across technology operations and product teams to assess control effectiveness manage audits and translate regulatory requirements into actionable measurable security practices.

Success in this role means turning governance into enablement helping teams move faster by defining clear expectations automating evidence and maintaining trust with our customers auditors and partners.

What Youll Do (Core Responsibilities)

Governance and Control Frameworks

  • Maintain and evolve the companys Information Security Governance Framework aligning with NIST CSF NIST 800-53 ISO 27001 SOC 2 PCI-DSS and other relevant standards.
  • Map security controls across frameworks to identify overlaps gaps and opportunities for simplification and automation.
  • Draft update and maintain policies standards and procedures in partnership with subject-matter experts across InfoSec IT Legal and Engineering.
  • Support the implementation and measurement of control effectiveness through dashboards and continuous monitoring programs.

Risk Management

  • Support the enterprise risk management (ERM) program by identifying assessing tracking and reporting technology and cybersecurity risks.
  • Facilitate risk assessments for new products third parties and major projects; ensure mitigation plans are defined and tracked to closure.
  • Maintain and enhance the risk register including metrics for likelihood impact and residual risk.
  • Collaborate with AppSec Cloud and IAM teams to quantify risk using data (e.g. vulnerability counts MTTR compliance exceptions) rather than qualitative labels alone.
  • Produce risk reports and heatmaps for leadership and steering committees.

    • Compliance and Audit Readiness

  • Lead or support internal and external audits (SOC NYDFS Texas DOB) coordinating evidence collection and control owner interviews.
  • Build evidence-as-code patterns automating artifact collection through existing systems (e.g. Azure AWS Jira ServiceNow Wiz Splunk).
  • Maintain an annual audit calendar and ensure recurring control testing is timely and consistent.
  • Track and verify remediation of findings; document and report status to management and auditors.

    • Third-Party Risk Management

  • Manage and mature the vendor security review process including questionnaire assessments evidence validation and risk scoring.
  • Coordinate security due diligence for acquisitions technology partners and critical service providers.
  • Collaborate with Procurement and Legal to ensure contracts include appropriate security privacy and data protection clauses .
  • Maintain a vendor risk register and report exposure by category and criticality.

    • Awareness Reporting and Enablement

  • Develop and publish periodic metrics and dashboards showing control health risk posture and compliance status.
  • Communicate risk and compliance expectations to business and technical stakeholders in clear actionable language.
  • Support security awareness and training campaigns focusing on control ownership and policy alignment.
  • Participate in tabletop exercises and incident post-mortems to ensure lessons learned are captured as control improvements.

    • Minimum Qualifications

  • 35 years of experience in Information Security IT Audit or GRC roles.
  • Working knowledge of at least one major control framework (e.g. NIST CSF ISO 27001 SOC 2 PCI-DSS or CIS Controls ).
  • Experience with risk assessment methodologies and familiarity with quantitative or semi-quantitative models.
  • Strong organizational skills and ability to manage multiple assessments audits and remediation efforts in parallel.
  • Proficiency with GRC or risk management platforms (e.g. Archer ServiceNow GRC LogicGate Tugboat Logic Drata or similar).
  • Understanding of cloud service provider shared responsibility models (AWS Azure GCP).
  • Excellent written and verbal communication skills with the ability to translate technical control results into executive-ready summaries.

    • Preferred Qualifications

  • Experience in an acquisitive environment helping standardize and integrate controls across multiple business units or subsidiaries.
  • Familiarity with data privacy regulations (GDPR CCPA GLBA) and privacy impact assessments.
  • Knowledge of secure software development life cycle (SSDLC) governance and control testing.
  • Experience supporting external attestations or certifications (SOC 2 Type II ISO 27001 PCI-DSS).
  • Relevant certifications such as CISA CRISC CISSP ISO 27001 Lead Implementer / Auditor or CCSK .

    • Behavioral Competencies

  • Enablement mindset : You see governance as a way to empower teams not block them.
  • Curiosity : You dig into how controls really work in technical systems not just on paper.
  • Precision : You care about evidence quality and clarity of documentation.
  • Collaboration : You work cross-functionally with engineers legal and executives to close risk gaps.
  • Communication : You distill complex regulatory and control requirements into understandable actionable guidance.

    • #Auris

    Candidates should be comfortable with an on-site presence to support collaboration team leadership and cross-functional partnership.

    Why Join Us :

    At Acrisure were building more than a business were building a community where people can grow thrive and make an impact. Our benefits are designed to support every dimension of your life from your health and finances to your family and future.

    Making a lasting impact on the communities it serves Acrisure has pledged more than $22 million through its partnerships with Corewell Health Helen DeVos Childrens Hospital in Grand Rapids Michigan UPMC Childrens Hospital in Pittsburgh Pennsylvania and Blythedale Childrens Hospital in Valhalla New York.

    Employee Benefits

    We also offer our employees a comprehensive suite of benefits and perks including :

    Physical Wellness : Comprehensive medical insurance dental insurance and vision insurance; life and disability insurance; fertility benefits; wellness resources; and paid sick time.

    Mental Wellness : Generous paid time off and holidays; Employee Assistance Program (EAP); and a complimentary Calm app subscription.

    Financial Wellness : Immediate vesting in a 401(k) plan; Health Savings Account (HSA) and Flexible Spending Account (FSA) options; commuter benefits; and employee discount programs.

    Family Care : Paid maternity leave and paid paternity leave (including for adoptive parents); legal plan options; and pet insurance coverage.

    and so much more!

    This list is not exhaustive of all available benefits. Eligibility and waiting periods may apply to certain offerings. Benefits may vary based on subsidiary entity and geographic location.

    Acrisure is an Equal Opportunity Employer. We consider qualified applicants without regard to race color religion sex national origin disability or protected veteran status. Applicants may request reasonable accommodation by contacting .

    California Residents : Learn more about our privacy practices for applicants by visiting the Acrisure California Applicant Privacy Policy .

    Recruitment Fraud : Please visit here to learn more about our Recruitment Fraud Notice .

    Welcome your new opportunity awaits you.

    Required Experience :

    IC

    Key Skills

    ArcGIS,Intelligence Community Experience,GIS,Python,Computer Networking,Data Collection,Intelligence Experience,R,Relational Databases,Analysis Skills,Data Management,Application Development

    Employment Type : Full-Time

    Experience : years

    Vacancy : 1

    [job_alerts.create_a_job]

    Grc Analyst • Oklahoma City, Oklahoma, USA

    [internal_linking.similar_jobs]
    IT GRC Analyst - Compliance

    IT GRC Analyst - Compliance

    Paycom Payroll Llc • Oklahoma City, OK, US
    [job_card.full_time]
    The IT Governance, Risk, and Compliance (GRC) team functions include maintaining and auditing information security controls to ensure conformance or compliance with applicable standards and local l...[show_more]
    [last_updated.last_updated_variable_days] • [promoted]
    Senior Finance & Strategy Analyst, Institutional

    Senior Finance & Strategy Analyst, Institutional

    Coinbase • Oklahoma City, Oklahoma, United States
    [filters.remote]
    [job_card.full_time]
    Ready to be pushed beyond what you think you’re capable of?.At Coinbase, our mission is to increase economic freedom in the world. It’s a massive, ambitious opportunity that demands the best of us, ...[show_more]
    [last_updated.last_updated_30] • [promoted]
    Side Hustle Project Lead

    Side Hustle Project Lead

    Finance Buzz • Blanchard, Oklahoma, US
    [job_card.full_time] +1
    We’re offering a role for someone who wants to lead their own side-income project in their spare time.You’ll explore various proven side hustles, select the ones that fit your lifestyle, and run th...[show_more]
    [last_updated.last_updated_30] • [promoted]
    Credit Monitoring Analyst II

    Credit Monitoring Analyst II

    Busey Bank • Oklahoma City, OK, United States
    [job_card.full_time]
    The Credit Monitoring Analyst II supports the commercial credit monitoring and portfolio management for the Bank through the review and analysis of borrower and guarantor financial information, tes...[show_more]
    [last_updated.last_updated_30] • [promoted]
    CDL-A Truck Driver

    CDL-A Truck Driver

    Jax Transport • The Village, OK, US
    [job_card.full_time]
    Pay : $80,000 salary / 2600 miles per week / touch freight.Running in Texas, Oklahoma, Kansas, New Mexico, and Colorado.These are the drivers who excel in customer service, go above and beyond being ...[show_more]
    [last_updated.last_updated_variable_days] • [promoted]
    Remote Consumer Insights Analyst (Hiring Immediately)

    Remote Consumer Insights Analyst (Hiring Immediately)

    Maxion Research • Warr Acres, Oklahoma, US
    [filters.remote]
    [job_card.part_time]
    Join Our Part-Time Research Studies Today!.Are you eager to earn extra income from the comfort of your home? We are looking for motivated individuals to participate in paid research studies includi...[show_more]
    [last_updated.last_updated_30] • [promoted]
    Senior Revenue Recognition Analyst

    Senior Revenue Recognition Analyst

    Oracle • Oklahoma City, OK, United States
    [job_card.full_time]
    The Americas Revenue Recognition team is a diverse group of highly motivated professionals that leverages its technical accounting and finance expertise to enable Oracle stakeholders to execute tra...[show_more]
    [last_updated.last_updated_variable_days] • [promoted]
    Analyst -Integrity

    Analyst -Integrity

    Energy Transfer • Oklahoma City, OK, United States
    [job_card.full_time]
    Energy Transfer, recognized by Forbes as one of America's best large employers, is dedicated to responsibly and safely delivering America's energy. We are driven to inspire our employees to create s...[show_more]
    [last_updated.last_updated_30] • [promoted]
    2+ Yrs Exp. OTR CDL-A Drivers - Earn $78,000-$109,200 / Year + Benefits

    2+ Yrs Exp. OTR CDL-A Drivers - Earn $78,000-$109,200 / Year + Benefits

    APL Cargo, Inc. • Yukon, OK, US
    [job_card.full_time]
    Top-Paying Reefer OTR Positions Now Available at APL CargoAverage 2,500 - 3,500 Weekly Miles.Start at 60 CPM - Earn $78,000 - $109,200 per year. Up to 2 CPM performance bump after 90 days.Up to 2 CP...[show_more]
    [last_updated.last_updated_30] • [promoted]
    Senior Financial Analyst

    Senior Financial Analyst

    Coinbase • Oklahoma City, Oklahoma, United States
    [filters.remote]
    [job_card.full_time]
    Ready to be pushed beyond what you think you’re capable of?.At Coinbase, our mission is to increase economic freedom in the world. It’s a massive, ambitious opportunity that demands the best of us, ...[show_more]
    [last_updated.last_updated_30] • [promoted]
    Internal Account Director (Recruitment & Retention)

    Internal Account Director (Recruitment & Retention)

    Syneos Health / inVentiv Health Commercial LLC • Oklahoma City, OK, United States
    [job_card.full_time]
    Internal Account Director (Recruitment & Retention).Syneos Health is a leading fully integrated biopharmaceutical solutions organization built to accelerate customer success.We translate unique cli...[show_more]
    [last_updated.last_updated_30] • [promoted]
    RN - Med Surg - Mercy Hospital Kingfisher

    RN - Med Surg - Mercy Hospital Kingfisher

    Mercy • Cashion, OK, US
    [job_card.full_time]
    Find your calling at Mercy! Overview : Utilizes the nursing process to provide patient care.Maintains professional accountability for provision of patient care for the assigned patients.Evaluates th...[show_more]
    [last_updated.last_updated_variable_days] • [promoted]
    Analyst, Tech Controls

    Analyst, Tech Controls

    Coinbase • Oklahoma City, OK, United States
    [job_card.full_time]
    Ready to be pushed beyond what you think you’re capable of?.At Coinbase, our mission is to increase economic freedom in the world. It’s a massive, ambitious opportunity that demands the best of us, ...[show_more]
    [last_updated.last_updated_30] • [promoted]
    Senior Finance & Strategy Analyst, FP&A

    Senior Finance & Strategy Analyst, FP&A

    Coinbase • Oklahoma City, Oklahoma, United States
    [filters.remote]
    [job_card.full_time]
    Ready to be pushed beyond what you think you’re capable of?.At Coinbase, our mission is to increase economic freedom in the world. It’s a massive, ambitious opportunity that demands the best of us, ...[show_more]
    [last_updated.last_updated_30] • [promoted]
    Refrigerated Truck Driver in Guthrie, OK

    Refrigerated Truck Driver in Guthrie, OK

    AllTruckJobs • Oklahoma City, US
    [job_card.full_time]
    At Marten Transport—a 2025 TCA Elite Fleet—you’ll go the distance with strong pay, flexible home time, and unmatched support. When you’re behind the wheel with a company that’s built to last, every ...[show_more]
    [last_updated.last_updated_30] • [promoted]
    Lead Analyst / Consultant, Supply Market Insights

    Lead Analyst / Consultant, Supply Market Insights

    American Red Cross • Oklahoma City, OK, United States
    [job_card.full_time]
    Please use Google Chrome or Mozilla Firefox when accessing Candidate Home.By joining the American Red Cross you will touch millions of lives every year and experience the greatness of the human spi...[show_more]
    [last_updated.last_updated_1_day] • [promoted]
    Sr. Application Systems Analyst

    Sr. Application Systems Analyst

    Paycom Payroll Llc • Oklahoma City, OK, US
    [job_card.full_time]
    The Application Systems Analyst SR is a senior-level role that analyzes, designs, supports, and documents computer information systems, serving as an integral project leader by actively participati...[show_more]
    [last_updated.last_updated_variable_days] • [promoted]
    CDL-A Truck Driver - Quality Home Time - Competitive Pay

    CDL-A Truck Driver - Quality Home Time - Competitive Pay

    Hogan Transports • Yukon, OK, US
    [job_card.full_time]
    Hogan Transports is Now Hiring CDL-A Dedicated Truck Drivers!.Join Hogan Transports as a CDL-A Truck Driver!.Unlimited driver referral program = Extra earning potential!.Safety & service award ...[show_more]
    [last_updated.last_updated_30] • [promoted]