GRC Analyst

Posted 11hrs ago

Employment Information

Industry
Education
Salary
Experience
Job Type

Report this job

Job expired or something wrong with this job?

Job Description

GRC Analyst strengthening RxBenefits’ healthcare compliance, risk, and security controls. Managing audits, assessments, GRC records, vendors, and executive risk reporting.

Responsibilities:

  • Coordinate and independently execute corporate compliance initiatives
  • Work closely with security and compliance teams to implement and execute RxBenefits’ compliance vision
  • Identify and maintain a list of high-value assets and associated threats and vulnerabilities
  • Document and maintain enterprise processes to reduce security risk
  • Design and mature security controls with organizational partners
  • Perform routine and ad-hoc security risk assessments
  • Maintain the GRC platform for controls, risk information, and related details
  • Produce periodic security risk views and reports for executives
  • Prepare for and assist with internal and external audits
  • Evaluate audit control deficiencies and document actionable business impact
  • Respond to client security questionnaire and audit report requests
  • Influence business partners and help balance business strategy with risk management controls
  • Monitor audit and compliance trends
  • Manage third-party vendor assessment and compliance
  • Assist with policies, procedures, and standards development
  • Perform other assigned duties

Requirements:

  • Bachelor’s degree or relevant equivalent experience
  • 3+ years of Audit, Risk or Compliance experience
  • 3+ years of experience with HIPAA regulatory controls, SSAE, SOC1 and SOC2
  • Ability to juggle multiple work efforts and quickly change direction
  • Ability to work in a detailed manner while looking broadly across a population to identify risk and concerns
  • Sound organizational, analytical, oral, and written communication skills
  • Ability to communicate to influence management and lead change in strategic and tactical initiatives
  • Self-starter with desire to learn and teach others
  • High energy, positive attitude, and flexibility
  • 5+ years of experience with IT general controls and other IT controls aligned with NIST, ISO, and COBIT frameworks preferred
  • Healthcare industry experience preferred
  • Experience working with external audit firms preferred

Benefits:

  • Remote first work environment
  • Choice of a HDHP or PPO Medical plan
  • 100% employer-paid HDHP premium for you and eligible family members
  • Dental, Vision, Short- and Long-Term Disability, and Group Life Insurance
  • 100% employer-paid premiums for Disability and Life Insurance, including family Dental and Vision coverage
  • Additional buy-up options for Short- and Long-Term Disability and Life Insurance
  • 401(k) with employer match up to 3.5%, available after 60 days
  • Community Service Day
  • 10 company holidays including MLK Day, Juneteenth, and the day after Thanksgiving
  • Floating holiday
  • High-speed internet reimbursement
  • Company-provided computer and monitors
  • Tuition reimbursement for accredited degree programs
  • Paid New Parent Leave for adoption or birth
  • Pet insurance
  • Mental health benefit and EAP service through Spring Health
  • Short-term incentive eligibility