Junior GRC & Security Engineer – AI & Health Data

Alan; Indianapolis (IN); On-site; USD 120,000 - 180,000; Full time

Job summary

Alan is seeking a permanent, hands-on GRC specialist to strengthen trust with members by turning complex regulations into practical actions. You will work on ISO 27001, HDS, DORA, GDPR and AI governance across multiple countries, building scalable compliance processes.

You will run audits, automate evidence collection, and collaborate with Legal, the DPO, and Engineering to manage risk and regulatory programs as the company grows from 1M+ members toward global expansion.

Qualifications

• Experience in regulatory compliance for healthcare/tech industries.
• Strong knowledge of ISO 27001, HDS, DORA and GDPR.
• Ability to translate complex regulations into concrete team tasks and deliverables.

Responsibilities

• Keep ISO 27001 and HDS certifications on track through audits and evidence collection.
• Translate regulations into practical actions with Legal and the DPO; assign tasks and track completion.
• Develop expertise in health sector frameworks (ANS, HDS) and apply to health data handling.
• Contribute to risk mapping including AI risks and monitor treatment plans with owning teams.
• Maintain and explain controls framework to engineers, managers, and stakeholders.
• Support incident governance: classify incidents, update BC/DR plans, and inform DORA reporting.
• Automate repetitive compliance tasks using scripts, tools, or AI.

Job description

Alan is seeking a permanent, hands-on GRC specialist to strengthen trust with members by turning complex regulations into practical actions. You will work on ISO 27001, HDS, DORA, GDPR and AI governance across multiple countries, building scalable compliance processes.

You will run audits, automate evidence collection, and collaborate with Legal, the DPO, and Engineering to manage risk and regulatory programs as the company grows from 1M+ members toward global expansion.