Назад
Company hidden
6 дней назад

GRC Analyst (Healthcare Compliance)

80 800 - 101 000$
Формат работы
remote (только USA)
Тип работы
fulltime
Грейд
middle
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
GRC Analyst (Healthcare Compliance): Coordinating corporate compliance initiatives and executing security risk, audit, control, and third-party vendor assessment activities with an accent on HIPAA, SSAE, SOC1, SOC2, and enterprise risk management. Focus on maintaining high-value asset and threat inventories, designing and maturing security controls, responding to audits and client questionnaires, and reporting risk posture to executives.

Location: Remote-first role available in AL, US and other listed US locations.

Salary: $80,800–$101,000 annually, plus eligibility for short-term incentives.

Company

hirify.global provides healthcare benefits solutions and operates compliance and security programs supporting its organization and clients.

What you will do

  • Coordinate and independently execute corporate compliance initiatives with security and compliance teams.
  • Identify and maintain high-value assets, threats, and vulnerabilities, and support effective risk mitigation.
  • Document enterprise processes and help design and mature security controls.
  • Perform routine and ad-hoc security risk assessments and maintain the GRC platform.
  • Prepare for and support internal and external audits, evaluate control deficiencies, and develop actionable business impact documentation.
  • Manage third-party vendor assessments, respond to client security questionnaires and audit requests, and produce executive risk reports.

Requirements

  • Bachelor’s degree or relevant equivalent experience.
  • 3+ years of Audit, Risk, or Compliance experience.
  • 3+ years of experience with HIPAA regulatory controls, SSAE, SOC1, and SOC2.
  • Ability to manage multiple work efforts and change direction quickly.
  • Ability to work with detailed information while identifying broader patterns, connections, risks, and concerns across a population.
  • Strong organizational, analytical, oral, and written communication skills, with the ability to influence management and lead strategic and tactical change.
  • Self-starter attitude, willingness to learn and teach others, high energy, positive attitude, and flexibility.

Nice to have

  • 5+ years of experience with IT general controls and other IT controls aligned with NIST, ISO, and COBIT frameworks.
  • Healthcare industry experience.
  • Experience working with external audit firms.

Culture & Benefits

  • Remote-first work environment.
  • Medical, dental, vision, disability, group life, pet insurance, and mental health benefits.
  • 401(k) with an employer match of up to 3.5% after 60 days.
  • Ten company holidays, a floating holiday, paid new parent leave, and a community service day.
  • High-speed internet reimbursement and company-provided computer and monitors.
  • Tuition reimbursement for accredited degree programs.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →