Remote GRC Analyst

Kforce Inc; Chicago (IL); Remote; USD 70,000 - 110,000; Full time

Job summary

Kforce Inc. is seeking a Remote GRC Analyst to support governance, risk, and compliance activities across security, privacy, and regulatory programs.

You will gather audit evidence for SOC 2, HITRUST, HIPAA, and related frameworks while coordinating with internal teams to validate controls and document findings. The role emphasizes strong documentation, attention to detail, and the ability to manage multiple compliance initiatives in a fast-paced environment.

Qualifications

• 1-3 years of experience in GRC, audit, information security, or related fields.
• Working knowledge of SOC 2, HITRUST, or HIPAA.
• Strong written communication and documentation skills.
• Ability to manage multiple compliance activities and deadlines.

Responsibilities

• Support governance, risk, compliance, privacy, and security assurance activities.
• Gather, organize, and maintain audit evidence for SOC 2, HITRUST, HIPAA, and related requirements.
• Coordinate with internal teams to validate controls and obtain required documentation.
• Track compliance activities, control evidence, open items, and remediation through completion.
• Maintain security and privacy policies, including version control, acknowledgments, and supporting documentation.
• Conduct third-party/vendor risk assessments, document findings, and elevate identified risks.
• Assist with internal control testing and external audit preparation.
• Support privacy and data governance initiatives, including data retention, de-identification, and secure disposal requirements.
• Maintain accurate, audit-ready records demonstrating adherence to established security and compliance standards.

Skills

GRC/Compliance experience

SOC 2 knowledge

HITRUST knowledge

HIPAA knowledge

Written communication

Attention to detail

Organizational skills

Cross-functional collaboration

Vendor risk assessments

BAAs / external audits

Audit coordination

Documentation

Tools

GRC automation platforms

Job description

Responsibilities

Kforce has a client in need of a Remote GRC Analyst.

• Support governance, risk, compliance, privacy, and security assurance activities
• Gather, organize, and maintain audit evidence for SOC 2, HITRUST, HIPAA, and related compliance requirements
• Coordinate with internal teams to validate controls and obtain required documentation
• Track compliance activities, control evidence, open items, and remediation efforts through completion
• Maintain security and privacy policies, including version control, acknowledgments, and supporting documentation
• Conduct third-party/vendor risk assessments, document findings, and elevate identified risks
• Assist with internal control testing and external audit preparation
• Support privacy and data governance initiatives, including data retention, de-identification, and secure disposal requirements
• Maintain accurate, audit-ready records demonstrating adherence to established security and compliance standards

Requirements

• 1-3 years of experience in governance, risk and compliance (GRC), audit, information security, or a related field
• Working knowledge of at least one compliance framework or regulation such as SOC 2, HITRUST, or HIPAA
• Strong written communication and documentation skills
• Excellent attention to detail with the ability to manage multiple compliance activities and deadlines
• Strong organizational and follow-through skills
• Ability to collaborate across Security, IT, Engineering, Operations, and other business teams
• Comfortable requesting documentation, tracking outstanding items, and escalating issues when appropriate
• Exposure to GRC or compliance automation platforms is a plus
• Experience within healthcare or another regulated industry is preferred
• Familiarity with vendor risk assessments, business associate agreements (BAAs), or external audits is a plus

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.

This job is not eligible for bonuses, incentives or commissions.

Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.