GRC Analyst I (Healthcare Technology)

Location: Tuzla, Bosnia and Herzegovina

Company

A personalized health platform combining health plan administration, wellbeing solutions, and care navigation for employers, health plans, and health systems.

What you will do

• Maintain and distribute policies, procedures, and standards while tracking exceptions and organizational compliance.
• Conduct initial risk assessments, document findings, maintain risk registers, and escalate risks for further analysis.
• Track remediation plans, collect progress data, and follow up on outstanding risk issues.
• Support compliance activities across SOC 2, ISO 27001, HIPAA, GDPR, HITRUST CSF, and other applicable frameworks.
• Collect audit evidence, track findings, maintain compliance documentation, and assist with internal reporting.
• Support employee compliance training and security awareness campaigns.

Requirements

• Bachelor’s degree in Information Security, Computer Science, Business Administration, or a related field.
• 0–2 years of experience in GRC, compliance, risk management, or a related field; internships and academic projects are considered.
• Proficiency in Microsoft Office, including Excel, Word, and PowerPoint.
• Basic understanding of SOC 2, ISO 27001, GDPR, HIPAA, or HITRUST CSF.

Nice to have

• Familiarity with GRC tools or platforms.

Culture & Benefits

• Work within a regulated healthcare technology environment focused on health and wellbeing.
• Inclusive workplace committed to diversity, equity, inclusion, and belonging.
• Security-conscious hiring process using verified company communication channels.