GRC Analyst

RxBenefits, Inc.; Tennessee; Remote; USD 81,000 - 101,000; Full time

Benefits offered by this job

Remote-first

HDHP or PPO medical plans with 100% of

Dental & Vision insurance

Disability & Life Insurance

Tuition Reimbursement

Holiday & time-off benefits

Internet reimbursement

Mental health support

Job summary

RxBenefits, Inc. is seeking a GRC Analyst to coordinate corporate compliance initiatives and work with security and compliance teams to implement the company’s compliance vision.

You will identify high-value assets, assess risks, maintain the GRC platform, and produce risk reports for executives. You will also manage third-party vendor assessments while staying current with HIPAA, SSAE, SOC1 and SOC2 controls. Remote-first role in Tennessee with strong attention to detail.

Qualifications

• Bachelor’s degree or relevant equivalent experience.
• 3+ years of Audit, Risk or Compliance experience.
• 3+ years of experience with HIPAA regulatory controls, SSAE, SOC1 and SOC2.
• Detail-oriented with ability to identify patterns across populations.

Responsibilities

• Coordinate and independently execute corporate compliance initiatives.
• Maintain list of high-value assets and associated threats to ensure risk mitigation.
• Document and maintain enterprise-wide processes to reduce security risk and mature controls.
• Perform routine or ad-hoc security risk assessments as needed.
• Assist with development and maintenance of the GRC platform and controls documentation.
• Produce periodic risk reports to inform executives of the health of the program.
• Evaluate impact of control deficiencies and drive business impact.
• Manage 3rd party vendor assessment and compliance.
• Stay up to date with latest audit and compliance trends.

Skills

Audit & risk

HIPAA controls

SOC1/SOC2 controls

Regulatory knowledge

Detail orientation

Education

Bachelor's degree or equivalent

Tools

GRC platform

Job description

The GRC Analyst will coordinate and independently execute corporate compliance initiatives. This role will work closely with the security and compliance teams and play a key role in implementing and executing RxBenefits compliance vision. The ideal candidate will have strong program and project management skills and high attention to detail with the ability to multi-task.
Work with RxBenefits teams to identify and maintain a list of high-value assets and their associated threats and vulnerabilities to ensure effective risk mitigation.
Document and maintain processes across the enterprise to reduce security risk; work with partners across the organization to design and mature security controls to support the mitigation of risks.
Perform routine or ad-hoc security risk assessments on various topics as needed or in response to management requests.
Assist in maintaining the GRC platform to document controls, risk information, and other related details.
Produce periodic views/ reports of security risk to inform executives of the health of the program and of the company’s risk position.
Evaluates impact of all control deficiencies in an audit, expands and refines control deficiency documentation to drive actionable business impact.
Exercises judgment and critical thinking to influence business partners.
Helps business partners balance their business strategy with appropriate risk management controls.
Stay up to date with latest audit and compliance trends.
Manages 3rd party vendor assessment and compliance.
Assist with development of policies, procedures, and standards.
Bachelor’s degree or relevant equivalent experience
3+ years of Audit, Risk or Compliance experience
3+ years of experience with HIPAA regulatory controls, SSAE, SOC1 and SOC2
Ability to work in a very detailed manner as well as to look broadly across a population and develop connections and themes identifying risk and concerns
Based on relevant market data and other factors, the anticipated hiring range for this role is $80,800 to $101,000 annually. Final compensation rates will be determined based on various factors, including but not limited to experience, skills, knowledge, and internal equity considerations. This role is also short-term incentive eligible. Incentive amounts will vary by individual and business goals.
Remote first work environment
Choice of a HDHP or PPO Medical plan, we pay 100% of the premium for the HDHP for you and your eligible family members
Dental, Vision, Short- and Long-Term Disability, and Group Life Insurance that we also pay 100% of premiums (for your family too on Dental and Vision)
Additional buy-up options for Short- and Long-Term Disability and Life Insurance
Community Service Day to give back and support what you love in your community
10 company holidays including MLK Day, Juneteenth, and the day after Thanksgiving plus a floating holiday to use as you like
Reimbursements for high-speed internet, we’ll send you a computer and monitors to help you do your best work
Tuition Reimbursement for accredited degree programs
A robust mental health benefit and EAP service through Spring Health to support you when you need it most