{"id":1311677,"url":"https://alion.io/job/bbrown-technology-risk-compliance-analyst","title":"Technology Risk & Compliance Analyst","company":{"id":1779108,"name":"Brown & Brown","domain":"bbrown.com","url":"https://alion.io/company/brown-and-brown","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":86,"open_postings":20,"ghost_share":0,"stale_share":0.75,"repost_share":0,"time_to_fill_p50_days":18,"computed_at":"2026-10-25T05:49:26Z"}},"role":"Legal","role_family":"Legal","seniority":"middle","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":85000,"max":105000,"currency":"USD","period":"year","gross":null,"usd_annual":105000},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false}],"status":"live","first_seen_at":"2026-09-22T00:00:00Z","employer_posted_date":"2026-09-22","last_verified_at":"2026-10-25T12:22:20Z","board_verified":true,"closed_at":null,"days_open":33,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":33},"description":"Built on meritocracy, our unique company culture rewards self-starters and those who are committed to doing what is best for our customers.\nBrown & Brown is seeking a Technology Risk & Compliance Analyst to join our growing team in Plano, Texas! This role embeds risk and compliance into delivery as an integrated capability that enables speed, quality, and regulatory alignment.\nThe ideal candidate will partner with portfolio leaders, delivery teams, security, and business stakeholders to proactively identify, prioritize, and manage risks, enforce compliance standards, and drive remediation across applications, infrastructure, and data environments. This role aligns to the Retail OCIO objective of managing risk within defined appetite while enabling scalable, secure technology delivery.\nHow you will Contribute:\nTechnology Risk Management\nIdentify, assess, and document technology risks across projects, products, and platforms within the Retail portfolio.\n\nFacilitate the prioritization of technology risks based on business impact, regulatory exposure, and defined risk appetite.\n\nConduct risk assessments for new initiatives, including M&A integrations and platform implementations.\n\nPartner with project managers and product teams to integrate risk mitigation into delivery plans and milestones.\n\nEnsure risk mitigation strategies align to enterprise risk appetite and portfolio priorities.\n\nMonitor risk exposure and ensure remediation activities are tracked through completion.\n\nCompliance Oversight & Governance\nEnsure alignment with internal policies and external regulatory requirements (e.g., SOX, SOC controls, data privacy standards).\n\nSupport implementation and maintenance of IT governance, risk, and compliance (GRC) frameworks.\n\nEvaluate and ensure technology policies, standards, and procedures are fit for purpose and aligned to regulatory and business requirements.\n\nRecommend updates to policies and standards based on regulatory changes, audit findings, and evolving risk landscape.\n\nMaintain compliance documentation, control narratives, and evidence repositories.\n\nMonitor and report adherence to policies, standards, and standard operating procedures across the portfolio.\n\nAudit & Control Effectiveness\nSupport internal and external audit activities, including evidence collection, walkthroughs, and remediation tracking.\n\nPartner with internal and external Audit to support successful audit outcomes, including SOX compliance, evidence validation, and timely remediation of findings.\n\nAssess effectiveness of IT controls and identify gaps across applications, infrastructure, and processes.\n\nPartner with control owners to strengthen control design and execution.\n\nDrive timely closure of audit findings and control deficiencies.\n\nVendor & Third-Party Risk\nPartner with Vendor Management and enterprise third- and fourth-party risk teams to ensure technology-related vendor risks are identified and addressed.\n\nIncorporate vendor-related risks into portfolio-level risk visibility and reporting.\n\nSupport tracking and remediation of vendor-related control gaps impacting Retail Technology delivery.\n\nReporting & Decision Support\nPrepare and deliver transparent, decision-ready reporting for governance forums, including Steering Committees and OCIO leadership.\n\nProvide insights that enable leadership to evaluate risk exposure alongside investment, delivery progress, and business outcomes.\n\nHighlight trade-offs, emerging risks, and areas requiring leadership attention or decision.\n\nTrack key risk indicators (KRIs), control effectiveness, and remediation progress.\n\nContinuous Improvement\nIdentify opportunities to streamline and improve GRC processes, tooling, and operating model effectiveness.\n\nContribute to the evolution of OCIO governance, risk, and control frameworks.\n\nSkills and Experience to be Successful:\nBachelor’s degree in Information Technology, Cybersecurity, Business, or related field.\n\n3-7 years of experience in IT risk, compliance, audit, or cybersecurity.\n\nStrong working knowledge of GRC frameworks (e.g., NIST, ISO 27001, COBIT).\n\nKnowledge of regulatory standards (SOX, SOC, GDPR, or similar).\n\nExperience with risk assessment, control design, and audit support.\n\nAbility to translate technical risk into business impact and executive-level messaging.\n\nStrong collaboration and stakeholder management across technology and business teams.\n\nHigh attention to detail with disciplined documentation practices.\n\nAble to travel up to 30%.\n\nPay Range\n$85,000 - $105,000 AnnualThe pay range provided above is made in good faith and based on our lowest and highest annual salary or hourly rate paid for the role and takes into account years of experience required, geography, and/or budget for the role.\nTeammate Benefits & Total Well-Being\nWe go beyond standard benefits, focusing on the total well-being of our teammates, including:\nHealth Benefits: Medical/Rx, Dental, Vision, Life Insurance, Disability Insurance \nFinancial Benefits: ESPP; 401k; Student Loan Assistance; Tuition Reimbursement \nMental Health & Wellness: Free Mental Health & Enhanced Advocacy Services\nBeyond Benefits: Paid Time Off, Holidays, Preferred Partner Discounts and more. \nNot reflective of all benefits. Enrollment waiting periods or eligibility criteria may apply to certain benefits. Benefit details and offerings may vary for subsidiary entities or in specific geographic locations.\nRecruiting Vendor Disclosure Statement\nBrown & Brown does not accept unsolicited resumes from external recruiters, recruitment vendors or employment agencies (\"Recruiting Vendors\"). Recruiting Vendors must have a valid written agreement and received prior written authorization from an authorized Brown & Brown representative before submitting candidates for any publicly posted role. Any unsolicited resumes submitted to Brown & Brown or its employees become the property of Brown & Brown, and no fees will be paid for such submissions. Additional information regarding this policy can be found on our careers page.\nThe Power To Be Yourself\nAs an Equal Opportunity Employer, we are committed to fostering an inclusive environment comprised of people from all backgrounds, with a variety of experiences and perspectives, guided by our Diversity, Inclusion & Belonging (DIB) motto, “The Power to Be Yourself”.","description_format":"text","description_chars":6332,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["401k plan","Life insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Financial Services","Jewelry","Property & Casualty Insurance"],"lifecycle":[{"event":"open","at":"2026-09-26T16:45:48Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 1","filings_12m":1,"filings_prev_12m":0,"green_card_filings_12m":0,"median_offered_wage_usd":132500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":16,"band":"cold","label":"Long shot","p_open":0.9,"p_active":0.407,"p_room":0.45,"age_days":33,"expected_fill_days":18,"reasons":["conf:73","stale_co","velocity","win:tail","comp:brand"],"computed_at":"2026-10-25T05:49:26Z"},"pay":{"stated_usd_annual":105000,"is_top_pay":false},"html_url":"https://alion.io/job/bbrown-technology-risk-compliance-analyst","json_url":"https://alion.io/job/bbrown-technology-risk-compliance-analyst.json","meta":{"generated_at":"2026-10-25T15:10:25Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":21890,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1779108},"rest":"https://alion.io/mcp/rest/get_company?id=1779108"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbbrown-technology-risk-compliance-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbbrown-technology-risk-compliance-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbbrown-technology-risk-compliance-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/bbrown-technology-risk-compliance-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbbrown-technology-risk-compliance-analyst"}]}