GRC Compliance Specialist

Job Description

A path for every ambition.

At HUB, we believe the best work happens when people are given real space to grow and then given the autonomy to exercise it. We power progress and protect ambition: for the clients who count on us, and equally for the people who make that possible every day.

We’re creative thinkers and determined doers, guided by values that show up in how we work together: with empathy, adaptability, accountability and a genuine commitment to one another’s success. We foster bold ideas, celebrate curiosity and share what we know. Because when people grow, the work they do grows with them.

Our purpose is deeply human: to help people navigate the world on their terms, at their speed, toward their future. We hold that same commitment to the people building careers here.

Whether you’re starting out or leveling up, you’ll find the resources to evolve, the support to take on more and a team ready to back you at every stage.

Your ambition has a home here.

HUB is currently seeking a Compliance Analyst to join our Governance, Risk and Compliance (GRC) team within Information Security.

About the Position:

Reporting to the First Line Compliance Manager, the Compliance Analyst will assist with the Compliance Department’s overall compliance and risk initiatives and help grow the Compliance business unit within Information Security. The role is responsible for developing, monitoring, and maintaining an Enterprise Risk Program that ensures the Company achieves optimum compliance with all regulatory requirements.

The ideal candidate brings prior Governance, Compliance and/or Risk experience, a naturally inquisitive mindset, and the ability to communicate effectively and thrive in an ever-changing control environment.

Key Competencies and Areas of Focus:

• GRC program support: Ability to provide broad support across the Compliance Manager and GRC department, including contributing to policy work, departmental initiatives, and cross-functional compliance activities.
• End-to-end ownership and follow-through: Demonstrated ability to manage workstreams from intake through resolution — tracking open items, driving tasks to completion, and maintaining accountability across complex, multi-step processes.
• Data validation and quality assurance: Skill in reviewing, analyzing, and validating data across software platforms to surface discrepancies, assess accuracy, and support data-driven decision-making.
• Data analysis and visualization: Ability to synthesize compliance and risk data into clear, meaningful outputs — including dashboards, trend reports, and visual summaries that communicate status and patterns to stakeholders at varying levels.
• Internal controls and audit readiness: Working knowledge of SOC 2 and ISO 27001 control frameworks, with the ability to assess control design, test operating effectiveness, and support ongoing control maintenance.
• Regulatory request management: Understanding of consumer rights frameworks and regulatory request workflows, with the ability to independently monitor, track, and process requests end-to-end across applicable jurisdictions.
• GRC and compliance platform proficiency: Hands-on experience with GRC, regulatory intake, or workflow management platforms. Experience with tools such as OneTrust, Optro, ServiceNow, or Jira is a plus; ability and willingness to learn new platforms is essential.
• Reporting and metrics development: Aptitude for building and maintaining tracking mechanisms and reporting artifacts that support departmental visibility into regulatory activities, asset management, and program health.
• Analytical skepticism and intellectual curiosity: A natural tendency to question assumptions, probe data for inconsistencies, and dig deeper when something doesn't add up — especially in ambiguous or evolving compliance landscapes.
• Adaptability and cross-functional collaboration: Comfort operating in a dynamic, maturing compliance environment, with the ability to contribute across risk management workstreams and take on emerging priorities as the program evolves.

Qualifications:

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill and/or ability required.

Education Level and Experience Required:

Minimum BA/BS or equivalent work experience in governance and/or compliance, information systems, or a related field. Candidates with 5 or more years of relevant GRC experience and demonstrated tool proficiency may be considered in lieu of a degree. Relevant certifications such as CRCM, CISA, or CRISC are a plus. Process expertise in GRC areas is necessary (e.g., risk management, compliance & regulation, controls automation, continuous controls monitoring).

Required Knowledge and Capabilities:

• Intellectual curiosity and analytical skills in areas of high complexity; sound judgment and a healthy skepticism when resolving ambiguous or complex matters.
• Strong written and verbal communication skills with the ability to proactively solve problems and engage effectively with stakeholders across the organization.
• Understanding of IT environments, risk, and assessment and auditing methodologies.
• Working knowledge of relevant regulatory frameworks and standards, including ISO 27001, SSAE 16/18, CCPA/CPRA.
• Ability to manage projects and workstreams across multiple teams, strong planning, organization, and project management skills.
• Ability to prioritize assigned work, track deliverables to completion, and meet deadlines across concurrent workstreams.
• Ability to work independently and collaboratively within a team environment.
• Proficiency with Microsoft 365 tools including Teams, SharePoint, and Visio; familiarity with GRC or compliance platforms (OneTrust, Optro, ServiceNow, Jira) preferred; willingness to learn new systems required. Relevant professional certifications (CISA, CRISC, CRCM, or equivalent) are a plus.

Pay transparency

The expected salary range for this position is $90,000- $120,000 and will be impacted by factors such as the successful candidate’s skills, experience and working location, as well as the specific position’s business line, scope and level. HUB International is proud to offer comprehensive benefit and total compensation packages: health/dental/vision/life/disability insurance, FSA, HSA and 401(k) accounts, paid-time-off benefits such as vacation, sick, and personal days, and eligible bonuses, equity and commissions for some positions.

The HUB difference

HUB International is one of North America’s largest insurance brokers, delivering risk management, insurance, employee benefits, retirement and wealth management solutions to businesses and individuals across the United States and Canada — through locally led teams backed by national expertise, giving you the agility of a local partner and the reach of a global organization.