Federal Exchange GRC Analyst

Integrity; Dallas (TX); On-site; USD 110,000 - 150,000; Full time

Job summary

Integrity, headquartered in Dallas, TX, seeks a Federal Exchange GRC Analyst to own compliance for federal Health Insurance Exchange and Enhanced Direct Enrollment, including Audit Readiness Certification and Privacy Evaluation obligations. This role requires disciplined evidence practices and the ability to manage immovable deadlines within Enterprise Compliance and Risk.

The ideal candidate has direct federal Exchange experience and proven ability to coordinate with Cybersecurity, Technology,

Qualifications

• Bachelor's degree in Business, Health Administration, Information Systems, Public Policy, or related field.
• 5 to 8 years of regulatory compliance, governance risk and compliance, or audit.
• Direct experience with federal Exchange, Enhanced Direct Enrollment, or Centers for Medicare and Medicaid Services regulatory requirements.
• Working knowledge of control frameworks and evidence standards sufficient to support an external audit.
• Demonstrated ability to manage to firm external deadlines with no tolerance for slippage.
• Experience coordinating across technology, security, and compliance stakeholders.

Responsibilities

• Own Audit Readiness Certification and Annual Marketplace Privacy Evaluation compliance activities and the associated submission cycle.
• Own CMS Direct Enrollment Entity obligations applicable to the Exchange business.
• Maintain the Enhanced Direct Enrollment control set, including control descriptions, ownership, testing evidence, and refresh cadence.
• Maintain audit-ready evidence in the enterprise GRC platform to support federal and third-party review.
• Prepare for and support federal audits, third-party audits, penetration testing coordination, and attestation cycles.
• Track federal regulatory change affecting the Exchange environment and translate it into control, process, or documentation change.
• Support scope discipline for the Enhanced Direct Enrollment environment so the audited perimeter remains deliberate and defensible.
• Coordinate with Cybersecurity, Technology, and the external audit program on evidence collection and control testing.
• Partner with the health segment compliance team on operational execution of Exchange requirements.
• Track and validate remediation of control gaps and audit findings through to closure.
• Report Exchange compliance status, deadlines, and risk into enterprise governance.
• Support compliance review of Exchange-related change requests, releases, and vendor dependencies

Skills

Attention to detail

Written communication

Regulatory interpretation

Organizational skills

Stakeholder collaboration

Education

Bachelor's degree

Tools

MS Office

Job description

Position Summary

The Federal Exchange GRC Analyst owns federal Health Insurance Exchange and Enhanced Direct Enrollment compliance for the health business, including Audit Readiness Certification and Annual Marketplace Privacy Evaluation obligations and Centers for Medicare and Medicaid Services Direct Enrollment Entity requirements. This is specialist regulatory work with fixed federal deadlines and a direct line to whether the business retains its Exchange connection. The role sits within Enterprise Compliance and Risk and serves the health segment, maintaining the control set, its evidence, and the audit and attestation cycles that sustain the connection. The ideal candidate has direct federal Exchange, Enhanced Direct Enrollment, or Centers for Medicare and Medicaid Services regulatory experience, disciplined evidence practices, and the ability to manage to an immovable deadline in a fast-moving environment.

Key Responsibilities

• Own Audit Readiness Certification and Annual Marketplace Privacy Evaluation compliance activities and the associated submission cycle
• Own Centers for Medicare and Medicaid Services Direct Enrollment Entity obligations applicable to the Exchange business
• Maintain the Enhanced Direct Enrollment control set, including control descriptions, ownership, testing evidence, and refresh cadence
• Maintain audit-ready evidence in the enterprise GRC platform to support federal and third-party review
• Prepare for and support federal audits, third-party audits, penetration testing coordination, and attestation cycles
• Track federal regulatory change affecting the Exchange environment and translate it into control, process, or documentation change
• Support scope discipline for the Enhanced Direct Enrollment environment so the audited perimeter remains deliberate and defensible
• Coordinate with Cybersecurity, Technology, and the external audit program on evidence collection and control testing
• Partner with the health segment compliance team on operational execution of Exchange requirements
• Track and validate remediation of control gaps and audit findings through to closure
• Report Exchange compliance status, deadlines, and risk into enterprise governance
• Support compliance review of Exchange-related change requests, releases, and vendor dependencies

Required Qualifications

• Bachelor's degree in Business, Health Administration, Information Systems, Public Policy, or a related field
• 5 to 8 years of experience in regulatory compliance, governance risk and compliance, or audit
• Direct experience with federal Exchange, Enhanced Direct Enrollment, or Centers for Medicare and Medicaid Services regulatory requirements
• Working knowledge of control frameworks and evidence standards sufficient to support an external audit
• Demonstrated ability to manage to firm external deadlines with no tolerance for slippage
• Experience coordinating across technology, security, and compliance stakeholders

Skills

• Exceptional attention to detail and documentation discipline
• Strong written communication, including control narratives and regulator-facing documentation
• Ability to interpret federal regulatory guidance and translate it into operational requirements
• Organizational skills sufficient to manage a fixed annual compliance calendar
• Collaborative approach across technical and non-technical stakeholders
• Proficiency in Microsoft Office Suite (Excel, Word, PowerPoint)

Preferred Qualifications

• Professional certifications such as CISA, CRISC, CHC, or similar
• Healthcare, health insurance, or Centers for Medicare and Medicaid Services compliance background
• Direct Audit Readiness Certification, Annual Marketplace Privacy Evaluation, or Direct Enrollment Entity audit experience
• Experience with enterprise GRC platforms for control and evidence management
• Familiarity with SOC 2, HITRUST, or NIST frameworks
• Experience supporting a technology environment subject to federal connectivity requirements

About Integrity

Integrity is one of the nation’s leading independent distributors of life, health and wealth insurance products. With a strong insurtech focus, we embrace a broad and innovative approach to serving agents and clients alike. Integrity is driven by a singular purpose: to help people protect their life, health and wealth so they can prepare for the good days ahead.

Integrity offers you the opportunity to start a career in a family-like environment that is rewarding and cutting edge. Why? Because we put our people first! At Integrity, you can start a new career path at company you’ll love, and we’ll love you back. We’re proud of the work we do and the culture we’ve built, where we celebrate your hard work and support you daily. Joining us means being part of a hyper-growth company with tons of professional opportunities for you to accelerate your career. Integrity offers our people a competitive compensation package, including benefits that make work more fun and give you and your family peace of mind.

Headquartered in Dallas, Texas, Integrity is committed to meeting Americans wherever they are — in person, over the phone or online. Integrity's employees support hundreds of thousands of independent agents who serve the needs of millions of clients nationwide. For more information, visit Integrity.com.

Integrity, LLC is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender identity, national origin, disability, veteran status, or any other characteristic protected by federal, state, or local law. In addition, Integrity, LLC will provide reasonable accommodations for qualified individuals with disabilities.