GRC Analyst: Elevate Security, Compliance & Risk

Visa Hunt; United States; On-site; USD 81,000 - 138,000; Full time

Job summary

US Anesthesia Partners, Inc. is seeking a GRC Analyst to strengthen security by designing and managing control and risk workflows, performing third-party risk assessments, and ensuring compliance with HIPAA, HITRUST, PCI, SOC 2, and NIST frameworks.

The role involves developing control libraries, maintaining risk registers, driving automation, and supporting audits with evidence management. A bachelor’s degree and 5+ years in governance, risk, and compliance are preferred; AuditBoard experience

Qualifications

• Bachelor’s degree or equivalent experience in information security, compliance, or GRC.
• Minimum of 5 years in governance, risk, and compliance functions within IT or security.
• Experience with HIPAA, NIST CSF, SOC 2, HITRUST, and related frameworks.
• Strong written and verbal communication for cross-functional stakeholders.
• Familiarity with audits, risk assessments, and control testing.

Responsibilities

• Leads design, configuration, and governance of control frameworks and risk workflows.
• Maintains control libraries, narratives, ownership, and evidence requirements.
• Oversees risk registers, scoring, and remediation within the GRC platform.
• Drives automation for control testing, evidence collection, and attestations.
• Supports audits with evidence gathering, responses, and remediation tracking.
• Develops and presents reports on control effectiveness, risk status, and compliance gaps.

Skills

Excellent written and verbal comms

Ability to manage multiple priorities

Familiarity with compliance frameworks

Strong collaboration across teams

Security policy communication

Education

Bachelor’s degree in information security, cybersecurity, or related field

Tools

AuditBoard/Optro

SOC 2 / HITRUST / HIPAA frameworks

CISA / CRISC / CISM certifications

Job description

US Anesthesia Partners, Inc. is seeking a GRC Analyst to strengthen security by designing and managing control and risk workflows, performing third-party risk assessments, and ensuring compliance with HIPAA, HITRUST, PCI, SOC 2, and NIST frameworks.

The role involves developing control libraries, maintaining risk registers, driving automation, and supporting audits with evidence management. A bachelor’s degree and 5+ years in governance, risk, and compliance are preferred; AuditBoard experience