GRC Analyst: SOC 2 & HITRUST Compliance (Early‑Career)

Ceresti; United States; Remote; USD 65,000 - 90,000; Full time

Benefits offered by this job

Health, dental, and vision benefits

Equity participation

PTO

Job summary

Ceresti is seeking an organized, early-career professional to support our security and compliance program. You will collect evidence for SOC 2 Type 2 and HITRUST, coordinate with control owners across Security, IT, and Engineering, and keep the CISO informed with timely status updates.

You will learn how a regulated healthcare company earns and maintains certifications while contributing to vendor risk assessments and policy maintenance. A collaborative culture and growth mindset are encouraged.

Qualifications

• Early-career professional with an interest in healthcare compliance and certifications.
• Strong written communication skills.
• Detail-oriented with ability to organize and track multiple evidence artifacts.
• Willingness to learn SOC 2 Type 2 and HITRUST certification processes.

Responsibilities

• Collect evidence for SOC 2 Type 2 and HITRUST, including internal audit testing of controls.
• Track control evidence status and keep the CISO informed.
• Coordinate with control owners across Security, IT, and Engineering to gather audit artifacts.

Skills

Organized

Clear writing

Learning mindset

Job description

Ceresti is seeking an organized, early-career professional to support our security and compliance program. You will collect evidence for SOC 2 Type 2 and HITRUST, coordinate with control owners across Security, IT, and Engineering, and keep the CISO informed with timely status updates.

You will learn how a regulated healthcare company earns and maintains certifications while contributing to vendor risk assessments and policy maintenance. A collaborative culture and growth mindset are encouraged.