Remote GRC Analyst: Compliance & Risk

RxBenefits, Inc.; Georgia; Remote; USD 81,000 - 101,000; Full time

Benefits offered by this job

Remote first work environment

HDHP or PPO medical plan, premiums 100

Dental, Vision, Disability, Life ins.

Tuition Reimbursement

Mental health benefit and EAP

Internet reimbursement

Company holidays

Job summary

RxBenefits, Inc. seeks a GRC Analyst to coordinate and independently execute corporate compliance initiatives within a remote-first environment. You will work closely with security and compliance teams to mitigate risk across the enterprise.

The role requires 3+ years in audit, risk or compliance, HIPAA/SOC1/SOC2 experience, and strong program management. You will document controls, assess third-party risk, and report to executives on risk posture.

Qualifications

• Bachelor’s degree or relevant equivalent experience.
• 3+ years Audit, Risk or Compliance experience.
• 3+ years HIPAA controls, SSAE, SOC1 and SOC2 experience.
• Detail-oriented with ability to identify risks across populations.
• Strong communication with executives.

Responsibilities

• Coordinate and independently execute corporate compliance initiatives.
• Identify and maintain high-value assets and associated threats to mitigate risk.
• Document and maintain enterprise processes to reduce security risk and design mature security controls.
• Perform routine or ad-hoc security risk assessments.
• Assist with development of policies, procedures, and standards.
• Manage 3rd party vendor assessments and compliance.
• Produce periodic risk reports for executives.
• Stay up to date with audit and compliance trends.

Skills

Program and project management

Attention to detail

Multi-tasking

Risk assessment

HIPAA compliance

Auditing

Education

Bachelor’s degree or equivalent experience

Tools

GRC platform

Job description

RxBenefits, Inc. seeks a GRC Analyst to coordinate and independently execute corporate compliance initiatives within a remote-first environment. You will work closely with security and compliance teams to mitigate risk across the enterprise.

The role requires 3+ years in audit, risk or compliance, HIPAA/SOC1/SOC2 experience, and strong program management. You will document controls, assess third-party risk, and report to executives on risk posture.