GRC Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Assist in the development, execution, and upkeep of security controls.

• Collaborate across departments to fulfill regulatory compliance obligations.

• Oversee risk management and uphold a robust security posture.

• Create, revise, evaluate, and sustain security and compliance policies, standards, guidelines, and procedures.

• Facilitate internal and external audits, including SOC 2 and HIPAA assessments.

• Monitor and maintain control alignment with industry frameworks utilizing Drata.

• Enhance the Drata environment through automation of controls and reporting.

• Aid in regulatory reporting and compliance documentation.

• Conduct vendor risk evaluations and due diligence assessments.

• Supervise third-party compliance with regulatory requirements.

• Track remediation efforts and ensure timely resolution of issues.

• Execute risk assessments and assist in risk mitigation strategies.

• Maintain the risk register and support risk tracking and reporting processes.

• Ensure adherence to acceptable use policies, least privilege access, data retention, and security protocols.

• Foster awareness of security and compliance issues.

• Carry out additional responsibilities as assigned.

⛳️ Requirements

• Bachelor’s degree or equivalent in Computer Science, Information Science and Technology, or a related field, or equivalent work experience is required.

• Minimum of three years’ experience in Governance, Risk, and Compliance is required.

• Experience in a highly regulated work environment is essential.

• Familiarity with HIPAA, HITECH, and SOC 2 compliance standards.

• Proficiency with GRC platforms such as Drata.

• Knowledge of NIST SP 800 series, ISO/IEC 27000 series, and similar frameworks is preferred.

• Exceptional oral, written, and interpersonal communication skills.

• Ability to influence and collaborate effectively with diverse groups of peers and business partners.

• Detail-oriented with the capability to manage multiple tasks simultaneously.

• Strong organizational and prioritization abilities.

• Security certifications are highly desirable.

• Capability to perform extended periods of sitting and computer work in a standard office role.

🏝️ Benefits

• Medical Insurance

• Dental Insurance

• Vision Insurance

• Life Insurance

• Disability Insurance

• Generous Paid Time Off

• Tuition Reimbursement

• Employee Assistance Program (EAP)

• Technology Stipend