Compliance Specialist, GRC Compliance & Risk

A path for every ambition. At HUB, we believe the best work happens when people are given real space to grow and then given the autonomy to exercise it. We power progress and protect ambition: for the clients who count on us, and equally for the people who make that possible every day. We’re creative thinkers and determined doers, guided by values that show up in how we work together: with empathy, adaptability, accountability and a genuine commitment to one another’s success. We foster bold ideas, celebrate curiosity and share what we know. Because when people grow, the work they do grows with them. Our purpose is deeply human: to help people navigate the world on their terms, at their speed, toward their future. We hold that same commitment to the people building careers here. Whether you’re starting out or leveling up, you’ll find the resources to evolve, the support to take on more and a team ready to back you at every stage. Your ambition has a home here. Job Description A path for every ambition. At HUB, we believe the best work happens when people are given real space to grow and then given the autonomy to exercise it. We power progress and protect ambition: for the clients who count on us, and equally for the people who make that possible every day. We’re creative thinkers and determined doers, guided by values that show up in how we work together: with empathy, adaptability, accountability and a genuine commitment to one another’s success. We foster bold ideas, celebrate curiosity and share what we know. Because when people grow, the work they do grows with them. Our purpose is deeply human: to help people navigate the world on their terms, at their speed, toward their future. We hold that same commitment to the people building careers here. Whether you’re starting out or leveling up, you’ll find the resources to evolve, the support to take on more and a team ready to back you at every stage.  Your ambition has a home here. HUB is currently seeking a Compliance Analyst to join our Governance, Risk and Compliance (GRC) team within Information Security. About the Position: Reporting to the First Line Compliance Manager, the Compliance Analyst will assist with the Compliance Department’s overall compliance and risk initiatives and help grow the Compliance business unit within Information Security. The role is responsible for developing, monitoring, and maintaining an Enterprise Risk Program that ensures the Company achieves optimum compliance with all regulatory requirements. The ideal candidate brings prior Governance, Compliance and/or Risk experience, a naturally inquisitive mindset, and the ability to communicate effectively and thrive in an ever-changing control environment. Key Competencies and Areas of Focus: GRC program support: Ability to provide broad support across the Compliance Manager and GRC department, including contributing to policy work, departmental initiatives, and cross-functional compliance activities. End-to-end ownership and follow-through: Demonstrated ability to manage workstreams from intake through resolution — tracking open items, driving tasks to completion, and maintaining accountability across complex, multi-step processes. Data validation and quality assurance: Skill in reviewing, analyzing, and validating data across software platforms to surface discrepancies, assess accuracy, and support data-driven decision-making. Data analysis and visualization: Ability to synthesize compliance and risk data into clear, meaningful outputs — including dashboards, trend reports, and visual summaries that communicate status and patterns to stakeholders at varying levels. Internal controls and audit readiness: Working knowledge of SOC 2 and ISO 27001 control frameworks, with the ability to assess control design, test operating effectiveness, and support ongoing control maintenance. Regulatory request management: Understanding of consumer rights frameworks and regulatory request workflows, with the ability to independently monitor, track, and process requests end-to-end across applicable jurisdictions. GRC and compliance platform proficiency: Hands-on experience with GRC, regulatory intake, or workflow management platforms. Experience with tools such as OneTrust, Optro, ServiceNow, or Jira is a plus; ability and willingness to learn new platforms is essential. Reporting and metrics development: Aptitude for building and maintaining tracking mechanisms and reporting artifacts that support departmental visibility into regulatory activities, asset management, and program health. Analytical skepticism and intellectual curiosity: A natural tendency to question assumptions, probe data for inconsistencies, and dig deeper when something doesn't add up — especially in ambiguous or evolving compliance landscapes. Adaptability and cross-functional collaboration: Comfort operating in a dynamic, maturing compliance environment, with the ability to contribute across risk management workstreams and take on emerging priorities as the program evolves. Qualifications: To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill and/or ability required. Education Level and Experience Required: Minimum BA/BS or equivalent work experience in governance and/or compliance, information systems, or a related field. Candidates with 5 or more years of relevant GRC experience and demonstrated tool proficiency may be considered in lieu of a degree. Relevant certifications such as CRCM, CISA, or CRISC are a plus. Process expertise in GRC areas is necessary (e.g., risk management, compliance & regulation, controls automation, continuous controls monitoring). Required Knowledge and Capabilities: Intellectual curiosity and analytical skills in areas of high complexity; sound judgment and a healthy skepticism when resol