InfoSec GRC Analyst

Paycom - ATS; Atlanta (GA); Remote; USD 90,000 - 120,000; Full time

Job summary

ExamWorks is seeking an experienced GRC Analyst to join our team in a 100% remote capacity across the United States. The role supports information security strategy, compliance requirements, and audit readiness for ExamWorks and subsidiaries.

The analyst will drive controls assessment, risk management, and policy development. Responsibilities include HITRUST and SOC2 coordination, vendor risk assessments, and cross-training with IT Security.

Qualifications

• 5 years in IT security, risk management, compliance and audit.
• Knowledge of security frameworks: SOX, PCI, SOC, NIST, ISO 27001, HITRUST, HIPAA, HITECH.
• Experience coordinating compliance audit processes and risk programs.
• Ability to articulate IT security policies and controls.

Responsibilities

• Assess, implement, manage, and document security controls aligned with ExamWorks' security strategy.
• Conduct intrusion and vulnerability detection, testing, risk assessment, and security awareness initiatives.
• Facilitate HITRUST and SOC2 audit engagements and coordinate data collection/remediation.
• Perform vendor risk assessments and respond to client assessments/RFPs.
• Coordinate cross-training with IT Security on tools and technical controls.

Skills

IT security

Risk assessment

Audits

Policy knowledge

Education

College Degree in Computer Science or related field

Job description

ExamWorks is looking for an experienced GRC Analyst to join the team!This role is 100% remote and can be located anywhere in the United States. This is a regular Monday - Friday standard business hours schedule.RESPONSIBILITIESAssessment, implementation, management, and documentation of security controls in support of ExamWorks and subsidiaries information security strategy and compliance requirements.Advocate an effective security program, but not limited to, ensuring an effective system-wide security analysis, intrusion and vulnerability detection, standards and testing, risk assessment, awareness and education, and development of policies, standards and procedures.Facilitate HITRUST, SOC2 audit engagement, data/artifact collection, exception remediation and monitoring.Respond to client assessments and RFPs, conduct vendor risk assessments and reassessments.Conduct or participate in the cross-training sessions with the IT Security team in the management and configuration of security tools and technical controls.College Degree in Computer Science or related field5 years in IT security, risk management, compliance, and auditSubject matter expert knowledge and experience on compliance and security framework standards such as SOX, PCI, SOC, NIST, ISO 27001, HITRUST, HIPAA and HITECH.Experience with coordination of compliance audit processes and IT security risk assessment programs.Capable of articulating general IT security policies, processes, and technical controls.Ability to provide insights in controls design, implementation, and deficiency remediation.Excellent written and verbal communication skills.WHO WE AREExamWorks is a leading provider of innovative healthcare services including independent medical examinations, peer reviews, bill reviews, Medicare compliance, case management, record retrieval, document management and related services. Our clients include property and casualty insurance carriers, law firms, third-party claim administrators and government agencies that use independent services to confirm the veracity of claims by sick or injured individuals under automotive, disability, liability and workers' compensation insurance coverages.Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, pregnancy, genetic information, disability, status as a protected veteran, or any other protected category under applicable federal, state, and local laws.Equal Opportunity Employer - Minorities/Females/Disabled/VeteransExamWorks offers a fast-paced team atmosphere with competitive benefits (medical, vision, dental), paid time off, and 401k.