GRC and Privacy Analyst

Job Summary

Detail-oriented and experienced, the remote GRC and Privacy Analyst will manage compliance programs, lead audit cycles, and embed privacy-by-design principles in a health-focused, data-sensitive organization.

Key responsibilities

• Administer and optimize compliance automation platforms, ensuring continuous control monitoring and evidence collection
• Lead and support audits across multiple frameworks, coordinating with internal stakeholders and external assessors
• Conduct risk assessments, manage evidence and control documentation, and apply project management discipline to compliance initiatives

Required qualifications

• Demonstrated experience with GRC and compliance automation applications, particularly Vanta
• Working knowledge of key security and privacy frameworks such as SOC 2, ISO 27001, and HIPAA
• Strong understanding of privacy regulations, including HIPAA and GDPR
• Proven experience managing or supporting audits and applying structured project management practices
• Relevant certifications (e.g., CISA, CIPP, ISO 27001 Implementer) and experience in a regulated data environment