Remote GRC Analyst: Build Risk & Compliance Programs

radiclehealth; United States; Remote; USD 95,000 - 105,000; Full time

Benefits offered by this job

Unlimited PTO

Medical, dental, and vision coverage

401k matching

Paid holidays

Volunteer time off

Paid parental leave

Remote work stipend

Job summary

Radicle Health is seeking a GRC Analyst to strengthen governance, risk, and compliance programs across our human services software products. You will identify risks, assess controls, and ensure adherence to SOC 2, ISO 27001, HIPAA, and FedRAMP standards while protecting data and assets.

You will partner with stakeholders, maintain risk registers, support audits, and help develop metrics and training to promote operational integrity in a remote-first environment.

Qualifications

• 3-5 years of experience in GRC, risk management, compliance, or audit-related roles.
• Familiarity with common compliance frameworks (SOC 2, ISO 27001, HIPAA, FedRAMP).
• Strong organizational skills with attention to detail and follow-through.
• GovRAMP, StateRAMP, or FedRAMP experience a plus.

Responsibilities

• Conduct ongoing risk reviews and maintain an up-to-date risk register
• Support risk assessments across critical business processes and systems
• Partner with stakeholders to develop and track risk mitigation plans through resolution
• Assist in building risk metrics and reporting for executive-level visibility
• Monitor adherence to relevant regulatory frameworks and internal controls
• Support audit readiness by coordinating evidence collection and documentation
• Partner with cross-functional teams to ensure successful audit outcomes with no material findings
• Review and update GRC-related policies on a regular cadence
• Support or lead compliance and security training initiatives
• Develop and distribute awareness materials on key compliance topics
• Maintain accurate and secure documentation for audits, investigations, and post-incident reviews

Skills

GRC

Risk Management

Compliance

Audits

Policy Writing

Education

Bachelor's degree

Tools

GRC tools

Job description

Radicle Health is seeking a GRC Analyst to strengthen governance, risk, and compliance programs across our human services software products. You will identify risks, assess controls, and ensure adherence to SOC 2, ISO 27001, HIPAA, and FedRAMP standards while protecting data and assets.

You will partner with stakeholders, maintain risk registers, support audits, and help develop metrics and training to promote operational integrity in a remote-first environment.