GRC Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Gather evidence for SOC 2 Type 2 and HITRUST, including conducting internal audit evaluations of controls.

• Monitor the status of control evidence and keep the CISO updated.

• Collaborate with Security, IT, and Engineering control owners to collect audit documentation.

• Revise security and privacy policies, manage versions, and track employee acknowledgments.

• Ensure documented proof that policies are being adhered to throughout the organization.

• Conduct risk assessments for third-party vendors, document findings, and escalate issues that require decisions.

• Assist with HIPAA and other healthcare compliance responsibilities alongside the CISO.

• Aid in managing data retention, de-identification, and disposal programs.

• Contribute to the Privacy and Data Program.

⛳️ Requirements

• One to three years of experience in governance, risk, and compliance, audit, or a related field.

• Proficient understanding of at least one of SOC 2, HITRUST, or HIPAA, with a willingness to quickly learn the others.

• Strong writing skills that are clear and concise.

• Keen attention to detail and the patience to complete many small tasks.

• Ability to follow up with colleagues for evidence in a non-intrusive manner.

• Experience with a GRC or compliance automation platform is preferred.

• Background in healthcare or another regulated industry is preferred.

• Familiarity with vendor risk assessments or BAA tracking is preferred.

• Experience with external audits is preferred.

• Employment is contingent upon successful completion of a background check, in accordance with applicable law.

🏝️ Benefits

• Full-time remote work.

• Competitive base salary with the final offer determined by experience, skills, and location.

• Comprehensive health, dental, and vision benefits.

• Equity participation in a growing healthcare technology company.

• PTO and a culture that values it.

• A collaborative, mission-driven environment where your contributions directly support family caregivers and enhance outcomes for individuals living with dementia.