GRC & Privacy Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee and enhance compliance automation platforms such as Vanta.

• Ensure ongoing control monitoring and gather necessary evidence.

• Lead and assist in audits across various frameworks.

• Collaborate with internal teams and external evaluators.

• Develop and advance compliance programs aligned with SOC 2, ISO 27001, ISO 27701, ISO 42001, HITRUST, HIPAA, NIST 800-53, and NIST AI RMF.

• Analyze and implement privacy regulations, including HIPAA and GDPR.

• Perform risk assessments and monitor remediation activities.

• Manage documentation related to evidence and controls.

• Establish deadlines, coordinate with cross-functional team members, and ensure compliance objectives are met.

• Utilize AI tools for reviewing evidence, drafting policies, analyzing risks, and optimizing reporting workflows.

⛳️ Requirements

• Proven experience with GRC and compliance automation tools, especially Vanta.

• Working familiarity with SOC 2, ISO 27001, ISO 27701, ISO 42001, HITRUST, HIPAA, NIST 800-53, and NIST AI RMF.

• Strong knowledge of HIPAA and GDPR regulations.

• Demonstrated experience in managing or assisting with audits.

• Structured project management skills.

• Comfort with AI tools and an eagerness to incorporate them into everyday tasks.

• Excellent verbal and written communication abilities.

• High attention to detail.

• Relevant certifications such as CISA, CIPP, or ISO 27001 Implementer.

• Experience in healthcare, wellness, or other regulated data environments.

• Understanding of AI governance and emerging AI compliance needs.

🏝️ Benefits

• Mission-driven impact.

• Opportunities for career growth and development.

• Supportive, human-centric workplace culture.

• Wellness perks and benefits.

• Comprehensive medical, dental, and vision insurance.

• 401(k) plan with company matching.

• Generous paid time off policies.

• Thrive Time: additional paid leave following major projects or intense work periods.

• Performance-based bonuses.

• Equity options.