GRC & Compliance Analyst (HIPAA/SOC2)

RxBenefits, Inc.; Baton Rouge (LA); Remote; USD 81,000 - 101,000; Full time

Benefits offered by this job

Remote first work environment

HDHP or PPO Medical plan

Dental, Vision, Disability, Life Ins.

401(k) with employer match up to 3.5%

Tuition Reimbursement

Paid New Parent Leave

Pet insurance

Mental health benefit

Job summary

RxBenefits, Inc. seeks a GRC Analyst to coordinate and execute corporate compliance initiatives, collaborating with security and compliance teams to advance RxBenefits' compliance vision.

The role requires strong program management, attention to detail, and the ability to multi-task. The ideal candidate has 3+ years in Audit, Risk or Compliance, and hands-on experience with HIPAA controls, SSAE, SOC1/SOC2, and IT general controls aligned with NIST/ISO/COBIT.

Qualifications

• Bachelor’s degree or relevant equivalent experience.
• 3+ years of Audit, Risk or Compliance experience.
• 3+ years of HIPAA, SSAE, SOC1 and SOC2 experience.
• Strong attention to detail and ability to multi-task.
• Excellent written and verbal communication; ability to influence management.
• Self-starter with willingness to learn and teach others.

Responsibilities

• Work with RxBenefits teams to identify and maintain a list of high-value assets and their associated threats and vulnerabilities to ensure effective risk mitigation.
• Document and maintain processes across the enterprise to reduce security risk; work with partners across the organization to design and mature security controls to support the mitigation of risks.
• Perform routine or ad-hoc security risk assessments on various topics as needed or in response to management requests.
• Assist in maintaining the GRC platform to document controls, risk information, and other related details.
• Produce periodic views/ reports of security risk to inform executives of the health of the program and of the company’s risk position.
• Prepare for and assists with responding to internal and external audits.
• Evaluates impact of all control deficiencies in an audit, expands and refines control deficiency documentation to drive actionable business impact.
• Work with RxBenefits Clients to respond to security questionnaire and/or audit report requests.
• Exercises judgment and critical thinking to influence business partners.
• Helps business partners balance their business strategy with appropriate risk management controls.
• Stay up to date with latest audit and compliance trends.
• Manages 3rd party vendor assessment and compliance.
• Assist with development of policies, procedures, and standards.
• All other duties as assigned.

Skills

Audit, Risk or Compliance

HIPAA controls

SSAE SOC1 SOC2

Multi-tasking

Analytical communication

Self-starter

Education

Bachelor’s degree or equivalent

Tools

IT general controls (NIST/ISO/COBIT)

Job description

RxBenefits, Inc. seeks a GRC Analyst to coordinate and execute corporate compliance initiatives, collaborating with security and compliance teams to advance RxBenefits' compliance vision.

The role requires strong program management, attention to detail, and the ability to multi-task. The ideal candidate has 3+ years in Audit, Risk or Compliance, and hands-on experience with HIPAA controls, SSAE, SOC1/SOC2, and IT general controls aligned with NIST/ISO/COBIT.