Senior GRC Analyst
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior GRC Analyst at Bamboo Health improving compliance and security automation. Evaluating risks and conducting audits to enhance the security posture and customer trust.
Responsibilities:
- Evaluate organizational policies and standards, ensuring that external and internal compliance requirements are met.
- Develop improvements to the compliance program, including the use of AI, automation, and process optimization.
- Review security-relevant language in customer contracts (MSAs, DPAs, BAAs) and RFP/RFI security sections, providing recommendations to Legal and the broader GRC team.
- Respond to customer security questionnaires using AI-assisted tools and trust content, exercising professional judgment to ensure responses are accurate and complete.
- Work with external auditors and customers as necessary, providing them with required information and assistance.
- Maintain and update trust center content and customer-facing security documentation.
- Perform vendor security risk assessments and contribute to the third-party risk management program.
- Assist in policy documentation upkeep and development, ensuring clarity and applicability.
- Monitor and assist with the internal training programs on compliance requirements and best practices.
- Ensure Bamboo Health’s security operations remain aligned with both internal and external compliance requirements, contributing to ongoing internal and external audit reviews.
- Effectively communicate Bamboo Health’s compliance posture to both internal and external stakeholders, offering tangible proof of adherence to policy requirements.
- Partner with the larger Information Security team to identify areas for continuous improvement within the compliance framework.
- Stay curious about emerging AI tools and how they can streamline or enhance work within your function.
Requirements:
- Bachelor’s degree in information security, computer science, or related field, or equivalent experience in a related field.
- Security compliance-related certifications such as CISSP, CISA, or CRISC are preferred.
- 5+ years of experience in information security, with substantial focus on compliance, audit, or risk management work.
- Direct experience with security frameworks and certifications like NIST SP 800-53, HITRUST, HIPAA, and/or FedRAMP.
- Experience responding to customer security questionnaires and supporting customer security due diligence activities.
- Experience reviewing security-relevant language in customer or vendor contracts.
- Familiarity with healthcare data protection requirements (HIPAA) and the compliance obligations they create.
- Demonstrated experience with security auditing and evidence gathering for compliance purposes.
- Experience evaluating security controls for compliance purposes.
- Familiarity with cloud security concepts and practices.
- Excellent written and verbal communication skills, with ability to build and communicate business rationale.
- Strong ability to learn quickly and work independently while being part of a team.
- Ability to build effective, sustainable working relationships internally, with customers, and external stakeholders.
- Comfort using or learning AI-supported tools (e.g., ChatGPT, CoPilot, or role-specific tools) to improve daily workflows.
- A forward-thinking, curious mindset with an openness to experimenting with new technologies.
- Strong analytical and problem-solving skills, with sound judgment and creativity in designing solutions.
- Proven ability to thrive in fast-paced, high-growth, and rapidly evolving environments.
- Ability to work effectively in a remote-first environment, ensuring high-quality virtual interactions with minimal distractions.
Benefits:
- Competitive compensation, including health, dental, vision and other benefits
Similar Jobs
Compliance Director
Compliance Director providing enterprise-wide compliance leadership for healthcare initiatives at Bon Secours Mercy Health. Responsible for compliance monitoring, risk assessments, and regulatory readiness.
Principal Compliance Consultant – Data Integrity
Principal Compliance Consultant leveraging FDA experience to drive compliance strategies and solutions for life sciences clients. Leading inspections, advising on regulations, and mentoring teams in a collaborative environment.
Middle School Special Education Teacher
Special Education Teacher managing IEPs and supporting students online at Stride. Collaborating with families and staff to ensure adapted education and successful learning outcomes.
Telecom Regulatory Compliance Specialist
Telecom Regulatory Compliance Specialist for telecommunications providers ensuring compliance filings. Advancing broadband initiatives while working remotely in a mission-driven organization.
Government Contracts and Compliance Specialist
Government Contracts & Compliance Specialist at Management Solutions overseeing U.S. Government contracts, compliance, and security initiatives. Collaborating with teams to ensure contract administration and audit readiness.
Compliance Specialist
Compliance Specialist ensuring regulatory compliance within UAMS. Monitoring operations, developing policies, and supporting committees for accreditation and regulatory readiness.
Compliance Specialist
Compliance Specialist supporting affordable housing compliance requirements for Fairway Management, Inc. Responsible for documentation, audits, reporting, and compliance systems across properties.
Compliance Specialist
Compliance Specialist managing affordable housing compliance across a multi-property portfolio at Fairway Management Company. Review documentation, conduct audits, and maintain compliance records.
Compliance Specialist
Compliance Specialist at Fairway Management responsible for affordable housing compliance. Supporting audit, reporting, and regulatory adherence across properties.
Trade Compliance Analyst
Trade Compliance Analyst managing import compliance and identifying improvement opportunities at ASSA ABLOY. Support product classification and oversee import trade programs, ensuring regulatory adherence.
Global Licensing & Compliance Audit Lead
Global Licensing & Compliance Audit Lead to support regulatory audits and licensing compliance for Safeguard Global. Collaborate with stakeholders for operational validation and remediation efforts.
Trade Compliance Manager
Trade Compliance Manager overseeing export and import compliance activities across Marvell’s global locations. Partnering with multiple teams to ensure compliance with various trade regulations.
Senior Regulatory Affairs Associate
Senior Regulatory Affairs Associate in NMDP advancing regulatory compliance for clinical and regulatory submissions across cell and gene therapies. Collaborating with internal and external partners to ensure adherence to regulatory requirements.
Principal Clinical Trial Regulatory Affairs
Regulatory Subject Matter Expert focusing on regulatory submissions for clinical trials in LATAM region. Collaborating with teams to ensure compliance and efficient processes.
Senior Government Regulatory Compliance Manager
Compliance Manager providing guidance on government contract accounting regulations for Cherokee Nation Businesses. Leading audits and ensuring company practices align with legal standards.
Maritime Development – Regulatory Consultant
Maritime Consultant supporting safety and regulatory compliance for LNG facilities and maritime operations. Collaborating with USCG, FERC, and other stakeholders on safety and compliance projects.
Director, Regulatory Strategy – Contract
Director of Regulatory Strategy at Vertex responsible for global/regional regulatory strategy development. Leading regulatory submission documents and Health Authority communications oversight.
Regulatory and Start Up Specialist
Regulatory and Start Up Specialist managing Site Activation activities in France for clinical research compliance. Ensuring adherence to regulations and facilitating project timelines in a home-based role.
Compliance Advisor – Lending
Compliance Advisor providing guidance on consumer lending regulations for Aqua Finance. Assisting with compliance management tasks and maintaining regulatory expertise.
Director of GRC Operational Risk Management
Director of GRC Operational Risk Management at Live Nation ensuring effective third-party risk management. Leading a team to evaluate vendor risks and support enterprise risk initiatives.