Junior GRC & Compliance Engineer (ISO 27001, AI Risk)

Alan; United States; Remote; USD 90,000 - 120,000; Full time

Job summary

Alan is hiring for a Governance, Risk and Compliance (GRC) specialist to join our security team. You will manage ISO 27001, HDS, and DORA audits across multiple countries, translating regulations into concrete actions and maintaining rigorous health-data governance.

You will collaborate with Legal, the DPO, and product teams to ensure continuous compliance, oversee risk mappings, and support incident governance as we scale our member base and operations.

Qualifications

• Experience implementing and maintaining ISO 27001, HDS and DORA audit cycles.
• Knowledge of GDPR and health data governance.
• Familiarity with health sector frameworks (ANS, HDS).

Responsibilities

• Keep ISO 27001 and HDS certifications on track, manage evidence collection and corrective actions.
• Translate regulations into actionable tasks with Legal and DPO, tracking completion.
• Build knowledge of health data regulations and apply to governance practices.
• Contribute to risk mapping, including AI risks, and follow up on mitigation plans.
• Support teams owning controls, answering questions and communicating clearly across stakeholders.
• Assist incident governance, classify incidents, and maintain continuity planning.

Skills

Regulatory compliance

Risk management

Information security

Audits

Education

Bachelor's degree

Tools

Audit management software

Governance tools

Job description

Alan is hiring for a Governance, Risk and Compliance (GRC) specialist to join our security team. You will manage ISO 27001, HDS, and DORA audits across multiple countries, translating regulations into concrete actions and maintaining rigorous health-data governance.

You will collaborate with Legal, the DPO, and product teams to ensure continuous compliance, oversee risk mappings, and support incident governance as we scale our member base and operations.