Senior GRC Analyst (Healthcare)

Location: Remote across the United States; candidates based in New York City must work in the office on Tuesday, Wednesday, and Thursday each week.

Salary: $155,000–$185,000 per year, plus equity eligibility and benefits.

Company

hirify.global uses clinical data, provider-performance metrics, and AI to help employers guide members toward higher-quality healthcare while reducing costs.

What you will do

• Manage SOC 2, HITRUST, and ISO 27001 certifications and run control testing throughout the audit lifecycle.
• Act as the internal subject matter expert for security and compliance frameworks.
• Coordinate external auditors and assessors.
• Manage the Security and Privacy Trust Center, compliance policies, standards, and procedures.
• Maintain the risk register and lead risk identification, scoring, reporting, and remediation.
• Scale GRC through AI, scripting, and automation in partnership with Engineering.

Requirements

• 5+ years of experience in GRC, IT audit, or information security compliance.
• Hands-on experience with HITRUST, SOC 2, and ISO 27001 audits.
• Experience designing controls, collecting evidence, and managing remediation in a cloud-native engineering environment.
• Ability to communicate effectively with engineers, operators, and executives.
• Experience using scripting and LLMs to automate repetitive GRC tasks.
• Must be eligible to work in the United States; employment visa sponsorship is not available.

Nice to have

• CISA, CISM, CISSP, CRISC, or ISO 27001 Lead Auditor certification.

Culture & Benefits

• Mission-driven work focused on improving the U.S. healthcare system.
• Flexible PTO.
• Medical, dental, and vision plan options.
• 401(k), Teladoc Health, and other competitive benefits.
• High-accountability environment with direct feedback and strong urgency.