GRC & Privacy Analyst: AI-Driven Compliance & Risk

Thrive Global; United States; On-site; USD 115,000 - 125,000; Full time

Benefits offered by this job

Health & dental coverage

401(k) with company match

Generous paid time off

Job summary

Thrive Global is seeking a detail-oriented GRC and Privacy Analyst to strengthen security, compliance, and data privacy posture. You will own and operationalize compliance programs, manage audit cycles, and embed privacy-by-design across a health-focused organization.

You’ll administer platforms like Vanta, support audits across SOC 2, ISO standards, HIPAA, GDPR, and apply AI tools to improve evidence review and reporting workflows.

Qualifications

• Experience with GRC and compliance automation tools such as Vanta.
• Knowledge of SOC 2, ISO 27001, ISO 27701, ISO 42001, HITRUST, HIPAA, NIST 800-53 and NIST AI RMF.
• Privacy regulations experience including HIPAA and GDPR.
• Experience managing or supporting audits with structured project management.
• Comfort with using AI tools in daily workflows.

Responsibilities

• Administer and optimize compliance automation platforms such as Vanta.
• Lead and support audits across frameworks with stakeholders and assessors.
• Maintain and mature compliance programs mapped to multiple standards.
• Interpret and apply HIPAA and GDPR privacy requirements.
• Conduct risk assessments, track remediation, document controls.
• Apply project management discipline to compliance initiatives.

Skills

GRC

Compliance automation

HIPAA

GDPR

Audit management

AI governance

Communication

Education

CISA

CIPP

ISO 27001 Implementer

Tools

Vanta

Job description

Thrive Global is seeking a detail-oriented GRC and Privacy Analyst to strengthen security, compliance, and data privacy posture. You will own and operationalize compliance programs, manage audit cycles, and embed privacy-by-design across a health-focused organization.

You’ll administer platforms like Vanta, support audits across SOC 2, ISO standards, HIPAA, GDPR, and apply AI tools to improve evidence review and reporting workflows.