GRC & Privacy Compliance Specialist

Thrive Global; Northern (KY); Hybrid; USD 115,000 - 125,000; Full time

Benefits offered by this job

Thrive Time

Health & dental benefits

401(k) with company match

Generous paid time off

Performance bonus & equity

Job summary

Thrive Global is seeking a detail-oriented GRC and Privacy Analyst to strengthen our security, compliance, and data privacy posture. You will own and operationalize compliance programs, manage audit cycles, and embed privacy-by-design across a data-sensitive, health-focused organization.

You will administer compliance automation like Vanta, lead cross-functional audits, and mature programs across SOC 2, ISO standards, HITRUST, HIPAA, and NIST frameworks while applying privacy rules (HIPAA,

Qualifications

• : Experience with GRC and compliance automation applications, notably Vanta
• : Knowledge of SOC 2, ISO 27001, ISO 27701, ISO 42001, HITRUST, HIPAA, NIST 800-53, and NIST AI RMF
• : Understanding of HIPAA and GDPR privacy regulations
• : Proven experience supporting audits and applying project-management practices
• : Comfortable with AI tools integrated into workflows

Responsibilities

• Administer and optimize compliance automation platforms such as Vanta, maintaining evidence collection.
• Lead and support audits across multiple frameworks with internal and external stakeholders.
• Maintain and mature compliance programs mapped to SOC 2, ISO 27001, ISO 27701, ISO 42001, HITRUST, HIPAA, NIST 800-53, and NIST AI RMF.
• Interpret and apply privacy standards including HIPAA and GDPR.
• Conduct risk assessments, track remediation, and manage evidence and control documentation.
• Apply project management discipline to compliance initiatives and drive deliverables to completion.
• Leverage AI tools to improve efficiency in evidence review, policy drafting, risk analysis, and reporting workflows

Skills

GRC experience

Audit management

Privacy-by-design

HIPAA & GDPR

AI tools familiarity

Security frameworks knowledge

Excellent communication

Regulated data environment

Project management

Vanta proficiency

Tools

Vanta

Job description

Thrive Global is seeking a detail-oriented GRC and Privacy Analyst to strengthen our security, compliance, and data privacy posture. You will own and operationalize compliance programs, manage audit cycles, and embed privacy-by-design across a data-sensitive, health-focused organization.

You will administer compliance automation like Vanta, lead cross-functional audits, and mature programs across SOC 2, ISO standards, HITRUST, HIPAA, and NIST frameworks while applying privacy rules (HIPAA,