As the Sr. Compliance Specialist (Associate), you will support Huron’s governance, risk, and compliance program and its certification, assurance, and regulatory obligations, including ISO/IEC 27001:2022, ISO 22301, SOC 2, HIPAA, CMMC, and SOX, working closely with IT, Legal, and business partners and SMEs.
Responsibilities
Support the review, update, and rollout of Huron IT and Security policies and procedures, and maintain ISMS documentation for ISO/IEC 27001:2022
Maintain the GRC risk and issue log and risk exception records, working with owners to keep ratings, due dates, and status current
Manage policy exceptions (vulnerability, end-of-life (EOL), and other requests) with business teams, tracking deadlines and obtaining leadership approval
Gather data for GRC and security metrics, KPIs, and KRIs for management reporting
Support business impact analyses (BIAs) and business continuity and disaster recovery (DR) testing, including scoping, scheduling, evidence, and follow-up
Requirements
Bachelor’s degree required, preferably in Information Security, Information Technology, Information Systems, or a related discipline
Analyze and manage third‑party risk across the vendor lifecycle, conducting risk assessments, due diligence, monitoring, and remediation.
Compensation
Salaried: $42-47 per hour.
Incorporated Business Rate: $50-55 per hour.
6-month contract.
Responsibilities
Conduct and provide effective challenge of Inherent Risk Questionnaires
Challenge responses where information appears incomplete, inconsistent, or does not appropriately reflect service criticality, data sensitivity, technology dependencies, regulatory impact, or other relevant risk considerations
Ensure the Inherent Risk Questionnaire appropriately identifies the supplier’s inherent risk
Escalate material gaps, inconsistencies, or unresolved concerns before the inherent risk assessment is finalized
Perform financial due diligence, including reviews of supplier financial health, financial risk indicators, and credit information
Requirements
Bachelor's degree in a related field
Nice to have: Familiarity with third-party risk regulatory expectations
Nice to have: Experience reviewing SOC reports, ISO certifications, audit reports
Nice to have: Experience with third-party risk or vendor management platforms such as Archer, Ivalua, or ProcessUnity
Nice to have: Understanding of cybersecurity, information security, privacy, business continuity, and technology risk concepts
Lead regulatory vendor risk compliance for AXA GO & GIE AXA, coordinating DORA and Solvency II reporting, contract remediation, and cross‑functional risk management.
Responsibilities
Coordinate DORA and Solvency II regulatory obligations
Lead data collection and validation for annual Register of Information
Support interactions with regulated entities
Monitor data quality and issue resolution
Prepare management reporting and escalation materials
Senior Business Systems Analyst supporting procurement and vendor management platforms, translating complex business needs into reliable technology solutions and driving continuous process improvement.
Compensation
In addition to the salary range, this role is eligible for bonus or incentive opportunities.
Responsibilities
Support PI Planning, sprint planning, grooming sessions, and release activities.
Drive the ProcessUnity effort into the existing ecosystem.
Ensure requirements traceability and alignment to business objectives.
Collaborate with product owners, business stakeholders and technical partners to define strategy and scope of software requirements.
Design, develop and present solutions and recommendations to leadership and project stakeholders.
Lead the day-to-day execution of engagement workstreams, supervise and coach staff, and serve as a trusted point of contact for client stakeholders in the Enterprise Risk, Controls & Resilience team.
The base salary range for this job is: New York City, Boston, and Washington DC Metro Areas, Washington State, and Southern California offices – $105,400 to $175,400 Bay Area California offices – $109,700 to $182,800 All other offices locations in the US, including Sacramento – $87,800 to $160,900
Responsibilities
Lead workstreams on internal controls, internal audit, ERM, third-party risk, compliance or resilience engagements
Lead walkthroughs and working sessions with process owners; evaluate process and control design; develop risk and control matrices and test plans
Lead internal audit fieldwork and draft audit reports and findings
Lead root cause analysis and help design remediation and corrective action plans
Facilitate risk identification and assessment workshops, build and maintain risk registers
Cyber Risk Business Development ManagerNewProtecht Group · Sydney, Australia
Vendor Risk Regulatory LeadAXA · Paris, France
Senior Business Systems AnalystCharles Schwab Inc. · Southlake, US