GRC Analyst

This is a fully remote position, open to applicants in Alabama, +44 more states.

📋 Description

• Coordinate and independently implement corporate compliance initiatives.

• Collaborate closely with security and compliance teams to realize RxBenefits’ compliance vision.

• Identify and maintain a catalog of high-value assets along with associated threats and vulnerabilities.

• Document and uphold enterprise processes to mitigate security risks.

• Design and enhance security controls in partnership with organizational stakeholders.

• Conduct routine and ad-hoc security risk assessments.

• Maintain the GRC platform for controls, risk information, and other relevant details.

• Generate periodic security risk perspectives and reports for executives.

• Prepare for and assist with both internal and external audits.

• Assess audit control deficiencies and document their actionable business impacts.

• Respond to client security questionnaires and audit report inquiries.

• Influence business partners to balance business strategies with risk management controls.

• Monitor trends related to audits and compliance.

• Oversee third-party vendor assessments and compliance.

• Assist in the development of policies, procedures, and standards.

• Perform other assigned tasks.

⛳️ Requirements

• Bachelor’s degree or relevant equivalent experience.

• 3+ years of experience in Audit, Risk, or Compliance.

• 3+ years of expertise with HIPAA regulatory controls, SSAE, SOC1, and SOC2.

• Ability to manage multiple tasks and adapt quickly to changing directions.

• Capability to work meticulously while maintaining a broad view to identify risks and concerns.

• Strong organizational, analytical, verbal, and written communication skills.

• Ability to communicate effectively to influence management and lead strategic and tactical initiatives.

• Self-motivated with a desire to learn and educate others.

• High energy, a positive attitude, and adaptability.

• Preferred: 5+ years of experience with IT general controls and other IT controls aligned with NIST, ISO, and COBIT frameworks.

• Preferred: Experience in the healthcare industry.

• Preferred: Experience working with external audit firms.

🏝️ Benefits

• Remote-first work environment.

• Option to choose between a HDHP or PPO Medical plan.

• 100% employer-paid HDHP premium for you and eligible family members.

• Dental, Vision, Short- and Long-Term Disability, and Group Life Insurance.

• 100% employer-paid premiums for Disability and Life Insurance, including family Dental and Vision coverage.

• Additional buy-up options for Short- and Long-Term Disability and Life Insurance.

• 401(k) with employer match up to 3.5%, available after 60 days.

• Community Service Day.

• 10 company holidays including MLK Day, Juneteenth, and the day after Thanksgiving.

• Floating holiday.

• High-speed internet reimbursement.

• Company-provided computer and monitors.

• Tuition reimbursement for accredited degree programs.

• Paid New Parent Leave for adoption or birth.

• Pet insurance.

• Mental health benefits and EAP service through Spring Health.

• Eligibility for short-term incentives.