GRC Analyst (Fully Remote)

Ceresti; United States; Remote; USD 65,000 - 90,000; Full time

Benefits offered by this job

Health, dental, and vision benefits

Equity participation

PTO

Job summary

Ceresti is seeking an organized, early-career professional to support our security and compliance program. You will collect evidence for SOC 2 Type 2 and HITRUST, coordinate with control owners across Security, IT, and Engineering, and keep the CISO informed with timely status updates.

You will learn how a regulated healthcare company earns and maintains certifications while contributing to vendor risk assessments and policy maintenance. A collaborative culture and growth mindset are encouraged.

Qualifications

• Early-career professional with an interest in healthcare compliance and certifications.
• Strong written communication skills.
• Detail-oriented with ability to organize and track multiple evidence artifacts.
• Willingness to learn SOC 2 Type 2 and HITRUST certification processes.

Responsibilities

• Collect evidence for SOC 2 Type 2 and HITRUST, including internal audit testing of controls.
• Track control evidence status and keep the CISO informed.
• Coordinate with control owners across Security, IT, and Engineering to gather audit artifacts.

Skills

Organized

Clear writing

Learning mindset

Job description

• You will report to the Chief Information Security Officer and work across Security, IT, Engineering, and Operations.
• This role is targeted to someone early in their career who is organized, writes clearly, and wants to learn how a regulated healthcare company earns and keeps its certifications.

What You Will Do:

• Collect evidence for SOC 2 Type 2 and HITRUST, including internal audit testing of controls.
• Track control evidence status and keep the CISO informed.
• Coordinate with control owners across Security, IT, and Engineering to gather audit artifacts.

What Success Looks Like:

• Evidence for SOC 2 and HITRUST that is accurate, complete, and on time, with no recurring gaps.
• Policies that stay current, with documented proof people are following them.
• Vendor risk assessments finished on schedule, with risks written down and escalated appropriately.

What We Offer:

• Competitive base salary with final offer based on experience, skills, and location.
• Comprehensive health, dental, and vision benefits, equity participation, and PTO.

Ceresti

Ceresti is a tech-enabled dementia care provider that supports family caregivers and improves outcomes for people living with dementia, delivering cost savings to health plans and ACOs. Our culture is rooted in agility, innovation, and collaboration, where every idea can spark meaningful improvement.