Remote-First GRC & HIPAA Compliance Analyst

RxBenefits, Inc.; Clayton (NC); Remote; USD 81,000 - 101,000; Full time

Benefits offered by this job

HDHP/PPO health plan

Dental insurance

Vision insurance

Disability insurance

Life insurance

Tuition reimbursement

Internet reimbursement

Equipment provided

Community service day

Holiday pay

Job summary

RxBenefits, Inc. is seeking a GRC Analyst to coordinate and independently execute corporate compliance initiatives. This role will work closely with the security and compliance teams and play a key role in implementing and executing RxBenefits compliance vision.

The ideal candidate will have strong program and project management skills, high attention to detail, and 3+ years in Audit, Risk or Compliance with HIPAA, SSAE, SOC1 and SOC2 controls experience. Remote-first environment.

Qualifications

• 3+ years of Audit, Risk or Compliance experience.
• 3+ years of experience with HIPAA regulatory controls, SSAE, SOC1 and SOC2.
• Ability to work in a detailed manner while spotting broad risk patterns.
• Strong program and project management skills.

Responsibilities

• Coordinate and independently execute corporate compliance initiatives.
• Maintain the GRC platform and document controls and risk information.
• Produce periodic risk reports for executives.
• Manage 3rd party vendor assessment and compliance.
• Assist with development of policies, procedures, and standards.

Skills

GRC program management

HIPAA controls

Risk assessments

Vendor risk

Policy development

Education

Bachelor's degree or relevant equivalent experience

Job description

RxBenefits, Inc. is seeking a GRC Analyst to coordinate and independently execute corporate compliance initiatives. This role will work closely with the security and compliance teams and play a key role in implementing and executing RxBenefits compliance vision.

The ideal candidate will have strong program and project management skills, high attention to detail, and 3+ years in Audit, Risk or Compliance with HIPAA, SSAE, SOC1 and SOC2 controls experience. Remote-first environment.