GRC Specialist

Gallagher Bassett GRC Specialist

At Gallagher Bassett, we're there when it matters most because helping people through challenging moments is more than just our job, it's our purpose. Every day, we help clients navigate complexity, support recovery, and deliver outcomes that make a real difference in people's lives. It takes empathy, precision, and a strong sense of partnership—and that's exactly what you'll find here. We're a team of fast-paced fixers, empathetic experts, and outcomes drivers — people who care deeply about doing the right thing and doing it well. Whether you're managing claims, supporting clients, or improving processes, you'll play a vital role in helping businesses and individuals move forward with confidence. Here, you'll be supported by a culture that values teamwork, encourages curiosity, and celebrates the impact of your work. Because when you're here, you're part of something bigger. You're part of a team that shows up, stands together, and leads with purpose.
Overview

Gallagher Bassett is seeking a GRC Specialist to support its IT Risk & Compliance Program. Primary responsibilities include:
Identify, evaluate, treat, and communicate risk related information across Information Technology
Ensure all risks are entered into and maintained within the Governance, Risk, and Compliance (GRC) Tool
Build and maintain key stakeholder relationships across all levels of management to ensure alignment and partnership across Information Technology
Develop dashboards and reports to track risk and remediation activities
How You'll Make An Impact

Specializes in identifying, monitoring, and managing risks associated with the use, ownership, operation, involvement, influence, and development/adoption of technology within an enterprise. Identifies/mitigates areas of risk that may impact the organization through working with individual business units, other control functions, and technology groups. Assesses probability of specific risks occurring and evaluate/value the impact/consequences of occurrence through risk analysis and modelling.
Intermediate: Applies practical knowledge of sub-function area typically obtained through advanced education and work experience. May require the following proficiencies:
Working independently with general supervision.
Facing IT function related problems that are difficult but typically not complex.
Potentially influencing others within the function through explanation of facts, policies and practices.
This role will also support the following IT GRC Program initiatives:
Assist with the facilitation of internal / external IT assessments (SOC1, SOC2, SOX)
Assist with planning and execution of IT Risk Assessments to identify gaps and improvement opportunities
Assist with creating & maintaining program documents (IT GRC intranet site, process documentation, educational documentation, etc.)
About You

Required:
Typically requires a University Degree and minimum 3 years of prior relevant experience, or equivalent experience.
Preferred:
Policy and protocol knowledge
Business knowledge
Risk quantification
Financial knowledge
Communication and stakeholder management
Regulation knowledge
Compensation And Benefits

We offer a competitive and comprehensive compensation package. The base salary range represents the anticipated low end and high end of the range for this position. The actual compensation will be influenced by a wide range of factors including, but not limited to previous experience, education, pay market/geography, complexity or scope, specialized skill set, lines of business/practice area, supply/demand, and scheduled hours. On top of a competitive salary, great teams and exciting career opportunities, we also offer a wide range of benefits. Below are the minimum core benefits you'll get, depending on your job level these benefits may improve:
Medical/dental/vision plans, which start from day one!
Life and accident insurance
401(K) and Roth options
Tax-advantaged accounts (HSA, FSA)
Educational expense reimbursement
Paid parental leave
Other benefits include:
Digital mental health services (Talkspace)
Flexible work hours (availability varies by office and job function)
Training programs
Gallagher Thrive program – elevating your health through challenges, workshops and digital fitness programs for your overall wellbeing
Charitable matching gift program
And more...
The benefits summary above applies to fulltime positions. If you are not applying for a fulltime position, details about benefits will be provided during the selection process.
We Value Inclusion And Diversity

Inclusion and diversity (I&D) is a core part of our business, and it's embedded into the fabric of our organization. For more than 95 years, Gallagher has led with a commitment to sustainability and to support the communities where we live and work. Gallagher embraces our employees' diverse identities, experiences and talents, allowing us to better serve our clients and communities. We see inclusion as a conscious commitment and diversity as a vital strength. By embracing diversity in all its forms, we live out The Gallagher Way to its fullest. Gallagher believes that all persons are entitled to equal employment opportunity and prohibits any form of discrimination by its managers, employees, vendors or customers based on race, color, religion, creed, gender (including pregnancy status), sexual orientation, gender identity (which includes transgender and other gender non-conforming individuals), gender expression, hair expression, marital status, parental status, age, national origin, ancestry, disability, medical condition, genetic information, veteran or military status, citizenship status, or any other characteristic protected (herein referred to as "protected characteristics") by applicable federal, state, or local laws. Equal employment opportunity will be extended in all aspects of the employer-employee relationship, including, but not limited to, recruitment, hiring, training, promotion, transfer, demotion, compensation, benefits, layoff, and termination. In addition, Gallagher will make reasonable accommodations to known physical or mental limitations of an otherwise qualified person with a disability, unless the accommodation would impose an undue hardship on the operation of our business.