GRC Analyst

Job Summary

A company is looking for a GRC Analyst to establish and improve its governance, risk, and compliance program.

Key Responsibilities

• Support and conduct audits for compliance with HIPAA and SOC2
• Develop and maintain policies, procedures, and documentation
• Perform risk assessments across systems, applications, and vendors

Required Qualifications

• 4+ years of experience in GRC, information security, or compliance
• Working knowledge of HIPAA, SOC2, and relevant regulatory requirements
• Experience translating regulatory requirements into policies and controls
• Strong understanding of risk assessment methodologies and control frameworks
• Relevant certifications such as CISA, CRISC, or CISSP are preferred