GRC Analyst

Job Summary

Coordinating corporate compliance initiatives, the full-time GRC Analyst will work closely with security and compliance teams to implement risk mitigation strategies and perform security risk assessments, all within a remote work environment.

Key responsibilities

• Identify and maintain a list of high-value assets and their associated threats and vulnerabilities
• Document and maintain processes to reduce security risk and design security controls in collaboration with partners
• Produce reports on security risk to inform executives and assist with internal and external audits

Required qualifications

• Bachelor's degree or relevant equivalent experience
• 3+ years of Audit, Risk, or Compliance experience
• 3+ years of experience with HIPAA regulatory controls, SSAE, SOC1, and SOC2
• Ability to manage multiple work efforts and adapt quickly to changing priorities
• Sound organizational and analytical skills with the ability to communicate effectively to influence management