Senior Compliance Analyst

Job Summary

To enhance compliance within a HIPAA-regulated environment, the full-time Senior Governance Risk & Compliance Analyst will manage customer security questionnaires, gather audit evidence for SOC 2 and HITRUST programs, and oversee third-party risk management while working remotely.

Key Responsibilities

• Serve as the primary responder for customer security questionnaires and collaborate with cross-functional teams to ensure timely completion of assessments
• Collect and validate evidence for SOC 2 and HITRUST audits, coordinating with various departments to ensure accuracy and timely delivery
• Draft and update security policies and manage the third-party risk management program, including vendor assessments and compliance tracking

Required Qualifications

• 5+ years of experience in information security, GRC, IT audit, or compliance roles
• Hands-on experience with SOC 2 and/or HITRUST audit programs
• Working knowledge of HIPAA Security Rule and related compliance regulations
• Experience responding to customer security questionnaires
• Bachelor's degree in Information Security, Information Technology, Business, or a related field (or equivalent experience)