Remote GRC Analyst

Job Summary

Supporting governance and compliance initiatives, the full-time Remote GRC Analyst will manage audit evidence for SOC 2, HITRUST, and HIPAA requirements, coordinate with internal teams, and track compliance activities from a remote location.

Key responsibilities

• Gather and maintain audit evidence for compliance requirements, ensuring adherence to security standards
• Coordinate with internal teams to validate controls and document compliance activities and remediation efforts
• Conduct third-party/vendor risk assessments and assist with internal control testing and external audit preparation

Required qualifications

• 1-3 years of experience in governance, risk, and compliance (GRC), audit, or information security
• Working knowledge of compliance frameworks such as SOC 2, HITRUST, or HIPAA
• Experience within healthcare or a regulated industry is preferred
• Familiarity with vendor risk assessments and external audits is a plus
• Exposure to GRC or compliance automation platforms is advantageous