Governance, Risk, and Compliance Analyst ( GRC, Remote)

Sword; United Kingdom; Remote; GBP 40,000 - 80,000; Full time

Job summary

An innovative firm is seeking a GRC Analyst to drive compliance and risk management initiatives. In this pivotal role, you will lead the implementation of key compliance frameworks, ensuring the organization meets the highest standards in security and compliance. You'll work independently to conduct audits and mentor team members, making a significant impact on safeguarding patient data. This is an exciting opportunity to join a rapidly growing company that values innovation and excellence, where your contributions will help shape the future of healthcare technology. If you are passionate about compliance and ready to take on a challenge, this role is for you.

Benefits

Comprehensive health, dental and vision insurance

Equity shares

Discretionary PTO plan

Parental leave

401(k)

Flexible working hours

Remote-first company

Paid company holidays

Free digital therapist for you and your family

Qualifications

• 5+ years of experience in Information Security and compliance frameworks.
• Proven success in leading audits and managing compliance in complex environments.

Responsibilities

• Lead the implementation of compliance frameworks like SOC 2 and ISO 27001.
• Conduct risk assessments and manage compliance audits effectively.
• Mentor junior team members and enhance compliance processes.

Skills

Information Security certifications

Compliance frameworks (SOC 2, ISO 27001, PCI-DSS, HITRUST)

Auditing

Risk Management

Analytical skills

Leadership skills

Communication skills

Problem-solving skills

Education

Bachelor's degree in a relevant field

Certifications in Information Security

Job description

Sword Health is on a mission to free two billion people from pain as the world’s first and only end-to-end platform to predict, prevent and treat pain.

Delivering a 62% reduction in pain and a 60% reduction in surgery intent, at Sword, we are using technology to save millions for our 2,500+ enterprise clients across three continents. Today, we hold the majority of industry patents, win 70% of competitive evaluations, and have raised more than $300 million from top venture firms like Founders Fund, Sapphire Ventures, General Catalyst, and Khosla Ventures.

Recognized as a Forbes Best Startup Employer in 2023, this award highlights our focus on being a destination for the best and brightest talent. Not only have we experienced unprecedented growth since our market debut in 2020, but we’ve also created a remarkable mission and value-driven environment that is loved by our growing team. With a recent valuation of $2 billion, we are in a phase of hyper growth and expansion, and we’re looking for individuals with passion, commitment, and energy to help us scale our impact.

Joining Sword Health means committing to a set of core values, chief amongst them to “do it for the patients” every day, and to always “deliver more than expected” on behalf of our members and clients.

This is an opportunity for you to make a significant difference on a massive scale as you work alongside 800+ (and growing!) talented colleagues, spanning two continents. Your charge? To help us build a pain-free world, powered by technology, enhanced by people — accessible to all.

Introduction:

As a GRC Analyst, you will play a pivotal role in ensuring Sword’s compliance with complex regulatory frameworks while driving innovation and efficiency in our Governance, Risk, and Compliance (GRC) programs. You will take ownership of key compliance initiatives, like SOC 2 and ISO 27001. This role functions independently to lead audits and improve risk management processes across the organization. This is an exciting opportunity to join a team where you’ll have a direct impact on safeguarding patient data, managing risk, and ensuring that Sword meets the highest security and compliance standards in the industry.

What you'll be doing:

• Leading the implementation and maintenance of key compliance frameworks such as SOC 2, ISO 27001, HITRUST, and PCI-DSS;
• Working closely with the Director of Risk and Compliance to continuously improve Sword’s GRC programs, driving initiatives to meet high compliance standards across Healthcare and AI;
• Taking full ownership of specific compliance certifications and audits, ensuring timely and effective execution;
• Mentoring and supporting junior team members, fostering a culture of continuous learning and improvement in the compliance function;
• Conducting comprehensive risk assessments, including third-party vendor risk management, and proposing strategies to mitigate identified risks;
• Spearheading internal and external audits for current and future compliance initiatives, ensuring accurate and efficient audit preparation and follow-up;
• Developing and enhancing processes related to security questionnaires, client security assessments, and compliance training at all organizational levels.

What you need to have:

• 5+ years of hands-on experience in Information Security certifications with proven success leading complex frameworks like SOC 2, ISO 27001, PCI-DSS, and HITRUST independently;
• Demonstrated experience in conducting and leading audits and maintaining compliance in highly regulated and complex environments such as Healthcare and AI;
• Excellent communication and leadership skills, with a demonstrated ability to mentor junior team members and communicate compliance requirements effectively to non-technical audiences;
• Strong analytical and problem-solving skills, with a proactive calculated approach to mitigating compliance risks;
• Self-starter approach with the ability to operate with minimal supervision.

We'd Love to see:

• A strategic mindset with the ability to identify process improvements and drive compliance initiatives across multiple teams;
• Strong track record of implementing and/or improving Risk Management Programs, including third-party risk management;
• Experience with FedRAMP or similar government-focused compliance frameworks;
• Practical knowledge of security practices, including Penetration Testing, DevSecOps, or other hands-on security skills that can enhance compliance work;
• In-depth knowledge of relevant laws, regulations, and security standards, particularly in the healthcare sector;
• Previous experience in a healthcare startup;
• Demonstrated ability to balance long-term compliance strategy with short-term tactical needs.

US - Sword Benefits & Perks:

• Comprehensive health, dental and vision insurance*
• Equity shares*
• Discretionary PTO plan*
• Parental leave*
• 401(k)
• Flexible working hours
• Remote-first company
• Paid company holidays
• Free digital therapist for you and your family

*Eligibility: Full-time employees regularly working 25+ hours per week

Portugal - Sword Benefits & Perks:

• Health, dental and vision insurance
• Meal allowance
• Equity shares
• Remote work allowance
• Flexible working hours
• Work from home
• Unlimited vacation
• Snacks and beverages
• English class
• Unlimited access to Coursera Learning Platform

*US Applicants Only: Applicants must have a legal right to work in the United States, and immigration or work visa sponsorship will not be provided.*

SWORD Health, which includes SWORD Health, Inc. and Sword Health Professionals (consisting of Sword Health Care Providers, P.A., SWORD Health Care Providers of NJ, P.C., SWORD Health Care Physical Therapy Providers of CA, P.C.*) complies with applicable Federal and State civil rights laws and does not discriminate on the basis of Age, Ancestry, Color, Citizenship, Gender, Gender expression, Gender identity, Gender information, Marital status, Medical condition, National origin, Physical or mental disability, Pregnancy, Race, Religion, Caste, Sexual orientation, and Veteran status.