IT Risk & Compliance Analyst (Hybrid)

Job overview

The IT Risk & Compliance Analyst (Hybrid) role is hybrid, with offices listed in Canton, MA; Boston, MA; Farmington, CT; and Raleigh, NC. The stated annual base salary range is $75,000–$107,000; a separate range of $95,000–$110,000 applies to specified locations including Massachusetts offices. Intact Insurance Specialty Solutions provides specialty insurance coverage and related risk-control and claims services. The analyst supports IT risk and governance, risk, and compliance activities by organizing evidence, tracking remediation, coordinating audits, and reporting cybersecurity metrics. The work helps technical and business stakeholders understand risks, control performance, and progress against security and compliance requirements.

What you'll do

• Maintain records of IT and cybersecurity risks, controls, evidence, action items, deadlines, exceptions, and remediation status
• collect and validate information for risk reviews, control assessments, and reporting
• coordinate internal and external audit responses
• track requests, findings, remediation, retesting, and closure
• analyze cybersecurity metrics and trends
• prepare dashboards and management summaries
• coordinate application security and penetration testing through remediation and retesting
• apply NIST-based terminology under leadership guidance.

What we're looking for

Skills & competencies

it risk analyst

compliance analyst

cybersecurity

grc

nist framework

audit coordination

risk metrics

hybrid

raleigh nc

intact insurance

$75k–$107k/year

application security

401(k)

paid parental leave

Work arrangement

• Weekend coverage required

Benefits & perks

• Medical, dental, and vision insurance with no waiting period
• paid time off
• 401(k) savings and annual contributions up to 12% of annual salary
• mental health support, life and disability insurance, paid parental leave, and additional voluntary benefits.

Why this role

Hybrid schedule with offices listed in Massachusetts, Connecticut, and Raleigh, North Carolina. Requires 3–5 years of experience in IT risk, GRC, information security, IT audit, technology controls, or a related function. Certifications such as Security+, CISA, CRISC, CISM, CISSP, CGRC, or ITIL Foundation are preferred but not required.

About the employer

Intact Services USA LLC is hiring for this role. Industry: Insurance Agencies and Brokerages. Sector: 52.