Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
Мало
$81к-101к/год
$98к$120кмедиана$140к
По похожим ролям (48) ~ $120к/год
70
Хорошая вакансия
развернуть
Хорошо структурированная GRC-позиция с четкими обязанностями и сильным соцпакетом, хотя диапазон зарплаты немного ниже рыночного медианного уровня для данной роли.
Кликните для подробной информации
Зарплата ниже рынкаРасширенный соцпакетЧеткие обязанностиУдаленный формат
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
GRC Analyst (Healthcare Compliance): Coordinating corporate compliance initiatives and executing security risk, audit, control, and third-party vendor assessment activities with an accent on HIPAA, SSAE, SOC1, SOC2, and enterprise risk management. Focus on maintaining high-value asset and threat inventories, designing and maturing security controls, responding to audits and client questionnaires, and reporting risk posture to executives.
Location: Remote-first role available in AL, US and other listed US locations.
Salary: $80,800–$101,000 annually, plus eligibility for short-term incentives.
Company
hirify.global provides healthcare benefits solutions and operates compliance and security programs supporting its organization and clients.
What you will do
Coordinate and independently execute corporate compliance initiatives with security and compliance teams.
Identify and maintain high-value assets, threats, and vulnerabilities, and support effective risk mitigation.
Document enterprise processes and help design and mature security controls.
Perform routine and ad-hoc security risk assessments and maintain the GRC platform.
Prepare for and support internal and external audits, evaluate control deficiencies, and develop actionable business impact documentation.
Manage third-party vendor assessments, respond to client security questionnaires and audit requests, and produce executive risk reports.
Requirements
Bachelor’s degree or relevant equivalent experience.
3+ years of Audit, Risk, or Compliance experience.
3+ years of experience with HIPAA regulatory controls, SSAE, SOC1, and SOC2.
Ability to manage multiple work efforts and change direction quickly.
Ability to work with detailed information while identifying broader patterns, connections, risks, and concerns across a population.
Strong organizational, analytical, oral, and written communication skills, with the ability to influence management and lead strategic and tactical change.
Self-starter attitude, willingness to learn and teach others, high energy, positive attitude, and flexibility.
Nice to have
5+ years of experience with IT general controls and other IT controls aligned with NIST, ISO, and COBIT frameworks.
Healthcare industry experience.
Experience working with external audit firms.
Culture & Benefits
Remote-first work environment.
Medical, dental, vision, disability, group life, pet insurance, and mental health benefits.
401(k) with an employer match of up to 3.5% after 60 days.
Ten company holidays, a floating holiday, paid new parent leave, and a community service day.
High-speed internet reimbursement and company-provided computer and monitors.
Tuition reimbursement for accredited degree programs.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →