GRC Analyst

Radicle Health; Oregon; Hybrid; USD 95,000 - 105,000; Full time

Benefits offered by this job

Unlimited PTO

Health coverage

401k matching

Paid holidays

Volunteer time off

Parental leave

Remote stipend

Job summary

Radicle Health is seeking a GRC Analyst to strengthen governance, risk, and compliance programs. You will identify risks, assess controls, and ensure alignment with SOC 2, ISO 27001, HIPAA, and FedRAMP requirements while protecting sensitive data and supporting audits.

In this role you will work with multiple teams to maintain policies, track mitigations, and report to leadership. Remote-friendly, with a focus on reliable, compliant operations across our organization.

Qualifications

• Bachelor's degree or equivalent experience in a related field.
• 3-5 years in GRC, risk management, compliance, or audit roles.
• Familiarity with SOC 2, ISO 27001, HIPAA, FedRAMP.
• Strong organizational skills and cross-functional collaboration.
• GovRAMP/StateRAMP/FedRAMP experience is a plus.

Responsibilities

• Conduct risk reviews and maintain a risk register.
• Support risk assessments across processes and systems.
• Develop risk mitigation plans with stakeholders.
• Build risk metrics and executive-level reporting.
• Monitor regulatory compliance and internal controls.
• Coordinate evidence for audits and readiness.
• Collaborate with teams to achieve audit outcomes with no material findings.
• Review and update GRC policies regularly.
• Support or lead compliance and security training initiatives.
• Distribute awareness materials on key topics.
• Maintain secure documentation for audits and investigations.

Skills

GRC Analyst

Governance

Risk management

Compliance

Audit support

Regulatory frameworks

Stakeholder partnership

GovRAMP/StateRAMP/FedRAMP

Education

Bachelor's degree in Business/Info Security/Risk Management

Tools

GRC platforms

Audit tooling

Job description

Radicle Health is a collection of human services software products designed to foster collaboration and innovation, helping organizations better serve their communities. We believe technology plays a crucial role in the success of the human services sector, but no single system can meet the diverse needs of every agency. That's why we've built Radicle Health as a home for mission-driven products that support organizations in delivering essential services. Under one roof, our teams learn from each other, test ideas faster, and think holistically about the individuals and communities we serve.At Radicle Health, you'll do meaningful work alongside people who genuinely care about our mission, our customers, and each other. Here, you're free to show up as your full self, celebrating wins, having fun, and knowing you're truly part of something bigger. You will have real ownership of your work and your contributions will have a direct impact on our success. We're invested in your growth because when you grow, so do we.

Role Overview

The GRC Analyst supports the organization's governance, risk, and compliance programs by identifying and assessing risk, ensuring adherence to regulatory frameworks, and maintaining internal policies and controls. This role plays a critical part in safeguarding company assets, protecting sensitive data, and promoting operational integrity in alignment with legal and industry standards.

Key Responsibilities

• Conduct ongoing risk reviews and maintain an up-to-date risk register
• Support risk assessments across critical business processes and systems
• Partner with stakeholders to develop and track risk mitigation plans through resolution
• Assist in building risk metrics and reporting for executive-level visibility
• Monitor adherence to relevant regulatory frameworks and internal controls
• Support audit readiness by coordinating evidence collection and documentation
• Partner with cross-functional teams to ensure successful audit outcomes with no material findings
• Review and update GRC-related policies on a regular cadence
• Support or lead compliance and security training initiatives
• Develop and distribute awareness materials on key compliance topics
• Maintain accurate and secure documentation for audits, investigations, and post-incident reviews

Qualifications

• Bachelor's degree in Business, Information Security, Risk Management, or related field (or equivalent experience)
• 3-5 years of experience in GRC, risk management, compliance, or audit-related roles
• Familiarity with common compliance frameworks (e.g., SOC 2, ISO 27001, HIPAA, FedRAMP)
• Strong organizational skills with attention to detail and follow-through
• Act as a highly collaborative partner across internal teams and external stakeholders, demonstrating strong consultative and relationship-building skills; proactively align on goals, communicate clearly, and drive shared success through influence, responsiveness, and accountability
• GovRAMP, StateRAMP, or FedRAMP experience a plus.

Preferred Qualifications

• Experience supporting audits or certification processes
• Exposure to risk management tools or GRC platforms
• Basic understanding of information security principles and controls
• Background in customer facing roles with a high level of customer interaction

What we offer:

• Unlimited PTO policy
• Competitive medical, dental, and vision healthcare coverage
• 401k matching
• Paid holidays
• Volunteer time off
• Paid parental leave
• Remote work stipend
• Compensation: $95,000 - $105,000
• Location: Remote

Salary ranges are dependent on a variety of factors, including qualifications, experience and geographic location. More information about the salary range specific to your working location and other factors will be shared during the hiring process.

Please note that all official communication regarding opportunities at Radicle Health will only come from an @radicle-health.com email address. Some fraudulent domains may look very similar at a glance, so if anything feels off, please proceed with caution.

Radicle Health is an Equal Employment Opportunity employer that proudly pursues and hires a diverse workforce. Radicle Health does not make hiring or employment decisions on the basis of race, color, religion or religious belief, ethnic or national origin, nationality, sex, gender, gender-identity, sexual orientation, disability, age, military or veteran status, or any other basis protected by applicable local, state, or federal laws or prohibited by Company policy.