GRC Analyst

About Our Client:

The organization operates in the healthcare benefits industry, addressing compliance and security challenges associated with managing sensitive healthcare information. It focuses on implementing and maintaining robust risk management and compliance programs to mitigate security risks and ensure regulatory adherence across its operations.

About the Opportunity:

The GRC ANALYST role is responsible for coordinating and independently executing corporate compliance initiatives that protect organizational assets and manage risk. This position plays a critical part in implementing compliance strategies, performing risk assessments, and supporting audit processes to maintain the security posture of the organization.

Responsibilities:

• Identify and maintain a register of high-value assets and their associated threats and vulnerabilities.
• Document and improve enterprise-wide processes to reduce security risks.
• Perform routine and ad-hoc security risk assessments.
• Maintain the Governance, Risk, and Compliance (GRC) platform with relevant control and risk data.
• Produce reports on security risk status for executive review.
• Support preparation and response for internal and external audits.
• Evaluate and document control deficiencies to inform business impact.
• Respond to client security questionnaires and audit report requests.
• Advise business partners on balancing strategy with risk management.
• Stay informed on audit and compliance trends.
• Manage third-party vendor assessments and compliance.
• Assist in developing policies, procedures, and standards.
• Perform other assigned duties.

Requirements:

• Bachelor’s degree or relevant equivalent experience.
• Minimum 3 years of experience in Audit, Risk, or Compliance.
• Minimum 3 years experience with HIPAA, SSAE, SOC1, and SOC2 regulatory controls.
• Ability to manage multiple tasks and shift priorities effectively.
• Detail-oriented with the ability to analyze risk across populations.
• Strong organizational, analytical, and communication skills.
• Self-motivated with a positive attitude and flexibility.

Preferred:

• Over 5 years of experience with IT controls aligned with frameworks such as NIST, ISO, or COBIT.
• Healthcare industry experience.
• Experience collaborating with external audit firms.

Pay Range and Compensation Package:

• The anticipated salary range for this role is $80,800 to $101,000 annually.
• Eligibility for short-term incentives varying by individual and business goals.
• Final compensation will be determined based on experience, skills, and internal equity.

Benefits & Perks:

• Remote-first work environment.
• Choice of HDHP or PPO medical plans with 100% premium coverage for HDHP for employees and eligible family members.
• Dental, vision, short- and long-term disability, and group life insurance with premiums fully covered for employees and family on dental and vision.
• Optional buy-up plans for disability and life insurance.
• 401(k) plan with employer match up to 3.5% after 60 days.
• Community service day.
• Ten company holidays plus a floating holiday.
• Reimbursement for high-speed internet and provision of computer equipment.
• Tuition reimbursement for accredited degree programs.
• Paid new parent leave applicable for birth or adoption.
• Pet insurance.
• Mental health benefits and employee assistance program.

Equal Opportunity Statement: Our client is an equal opportunity employer. They celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, or national origin.

Note:

RemoteHunter is a recruitment partner of this role. Please note that all employment decisions, including candidate assessment, interviews, hiring, compensation, and employment terms, are made exclusively by the hiring employer.