GRC Analyst

Responsibilities

• Assist in the development, update, review, and maintenance of security and compliance policies, standards, guidelines, and procedures
• Support internal and external audits such as SOC 2 and HIPAA
• Track and maintain alignment of controls with industry frameworks using Drata
• Optimize Drata environment by automating controls and reporting
• Conduct vendor risk assessments and due diligence reviews
• Monitor third-party compliance with regulatory obligations
• Conduct risk assessments and support risk mitigation planning
• Maintain risk register and support risk tracking and reporting
• Monitor user adherence to security policies including least privilege access and data retention

Requirements

• B.S. or equivalent in Computer Science, Information Science and Technology, or related field
• At least three years of experience in Governance, Risk, and Compliance work
• Experience working in a highly regulated environment
• Experience in HIPAA, HITECH, and SOC 2 compliance environments
• Experience working with GRC platforms such as Drata
• Familiarity with NIST SP 800 series and ISO/IEC 27000 series

Preferred Qualifications

• Security certifications

Benefits

• Medical, Dental, and Vision insurance
• Life and Disability Insurance
• Generous Paid Time Off
• Tuition Reimbursement
• Employee Assistance Program (EAP)
• Technology Stipend