Senior Analyst, Governance Risk and Compliance

Helping careers take flight. Reshaping an industry. Enable your career to be Made on Duck Creek.

WHAT WE ARE ABOUT:

Duck Creek Technologies is the intelligent solutions provider defining the future of the property and casualty (P&C) and general insurance industry. We are the platform upon which modern insurance systems are built, enabling the industry to capitalize on the power of the cloud to run agile, intelligent, and evergreen operations. Our modern SaaS solutions help insurers set a new standard and revolutionize how consumers interact with insurance companies.  

Authenticity, purpose, and transparency are core to Duck Creek, and we believe insurance should be there for individuals and businesses when, where, and how they need it most. Our market-leading solutions are available on a standalone basis or as a full suite, and all are available via Duck Creek OnDemand. With more than 1,000 successful implementations to date, Duck Creek removes the IT burden for insurers so they can focus on the business of insurance. 

We have a flock of more than 1,800 employees across the globe and are proud to be a Flexible-First employer. We empower our employees with the choice to work from an office, from home, or on a hybrid schedule. Our flexible-first environment fosters productivity, inclusion, collaboration, and ensures a consistent employee experience regardless of location. 

If working in a fast-paced, rapidly evolving company that is transforming one of the world’s oldest and largest industries sounds exciting, let us know. We are excited you are considering Duck Creek as a future employer and hope you decide to join “The Flock”! 

To learn more about us, visit www.duckcreek.com and follow us on our social channels for the latest information – LinkedIn and Twitter.

TITLE: Senior Analyst, Governance Risk and Compliance

As a Senior Analyst, Governance Risk and Compliance, you will play a critical role in our organization's efforts to manage and mitigate risks, ensure compliance with regulations, and enhance overall governance. You will work closely with cross-functional teams to develop and implement GRC strategies, policies, and procedures, contributing to the achievement of our business objectives while safeguarding our reputation and integrity.

WHAT YOU’LL DO:

Risk Management:

• Identify and assess potential risks across the organization.
• Develop risk mitigation strategies and action plans.
• Monitor and report on risk exposure and key risk indicators.
• Collaborate with stakeholders to implement risk controls and safeguards.
• Assist with risk and control self-assessments to test design, implementation, and operating effectiveness of controls.

Compliance Management:

• Stay current with relevant laws, regulations, and industry standards.
• Conduct internal and external compliance assessments and audits including facilitating Duck Creeks’ SOC 1 and SOC 2 assessments with external auditors.
• Ensure adherence to internal policies and external requirements.
• Develop and maintain compliance documentation.

Governance Enhancement:

• Participate in the development and implementation of governance frameworks.
• Assist in the creation of policies, procedures, and guidelines.
• Monitor and enhance corporate governance practices.

Data Analysis and Reporting:

• Analyze data related to risks, compliance, and governance.
• Prepare and deliver reports to senior management and relevant stakeholders.
• Provide insights and recommendations for decision-making.

Cross-functional Collaboration:

• Work closely with IT, legal, finance, and other departments to align GRC efforts.
• Collaborate with external partners and assessors as necessary.
• Facilitate communication and knowledge-sharing on GRC matters.

WHAT YOU’VE DONE:

• Degree preferred or equivalent years of practical job experience in a similar function or role.
• 3+ years proven experience in GRC, risk management, or compliance roles, with a track record of increasing responsibility.
• Strong understanding of regulatory requirements and industry standards (e.g., ISO 27001, NIST, GDPR).
• Excellent analytical and problem-solving skills, with the ability to make data-driven decisions.
• Effective communication and interpersonal skills to colla