Remote GRC Analyst – Compliance & Risk

RxBenefits, Inc.; Portland (ME); Remote; USD 81,000 - 101,000; Full time

Benefits offered by this job

Remote first

HDHP/PPO covered

Dental & Vision

Disability & Life insurance

401(k) match

Internet reimbursement

Tuition reimbursement

Paid parental leave

Pet insurance

Mental health benefits

Job summary

RxBenefits, Inc. seeks a GRC Analyst to coordinate and execute corporate compliance initiatives with the security and compliance teams. You will implement the compliance vision, manage risk, and ensure high attention to detail across multiple tasks.

The role requires a Bachelor's degree and 3+ years in audit, risk, or HIPAA/SOC controls, with healthcare experience preferred. Remote-first environment and robust benefits are offered.

Qualifications

• Bachelor’s degree or relevant equivalent experience.
• 3+ years of Audit, Risk or Compliance experience.
• 3+ years with HIPAA controls, SSAE, SOC1 and SOC2.
• Ability to juggle multiple efforts and redirect quickly.
• Detail-oriented with ability to identify risk patterns.
• Strong communication skills to influence management.
• Self-starter, eager to learn and teach others, energetic and flexible.
• 5+ years IT general controls experience is a plus.
• Healthcare industry experience preferred.
• Experience with external audit firms is preferred.

Responsibilities

• Identify and maintain high-value assets and threats for risk mitigation.
• Document and maintain enterprise processes to reduce security risk.
• Perform routine or ad-hoc security risk assessments.
• Maintain the GRC platform to document controls and risk information.
• Produce periodic risk reports for executives.
• Assist with audits and audit responses.
• Evaluate impact of control deficiencies and drive action.
• Coordinate with clients on audit requests.
• Influence partners with judgment and critical thinking.
• Balance business strategy with risk controls.
• Stay current with audit and compliance trends.
• Manage third-party vendor assessments.
• Assist with policy, procedures, standards development.
• Other duties as assigned.

Skills

Multitasking

Detail-oriented

Organizational skills

Analytical thinking

Oral and written communication

Influence management

Self-starter

Learn and teach

Flexibility

Auditing and risk

HIPAA controls

SSAE SOC1 SOC2

IT general controls

External audits

Vendor risk

Education

Bachelor’s degree or equivalent

Tools

GRC platform

Job description

RxBenefits, Inc. seeks a GRC Analyst to coordinate and execute corporate compliance initiatives with the security and compliance teams. You will implement the compliance vision, manage risk, and ensure high attention to detail across multiple tasks.

The role requires a Bachelor's degree and 3+ years in audit, risk, or HIPAA/SOC controls, with healthcare experience preferred. Remote-first environment and robust benefits are offered.