GRC Analyst

Job Summary

To support compliance efforts in a regulated healthcare environment, the full-time remote GRC Analyst will gather audit evidence, maintain security policies, and assist with vendor risk assessments while collaborating with various teams across the organization.

Key responsibilities

• Collect and document evidence for SOC 2 Type 2 and HITRUST audits
• Update and track security and privacy policies, ensuring compliance across the company
• Support HIPAA compliance and manage vendor risk assessments, documenting findings and escalating as necessary

Required qualifications

• One to three years of experience in governance, risk and compliance, audit, or a related field
• Working knowledge of SOC 2, HITRUST, or HIPAA, with a willingness to learn
• Strong writing skills for producing clear and precise documentation
• Attention to detail and ability to manage multiple tasks effectively
• Ability to follow up with colleagues for evidence in a professional manner