Remote GRC Analyst: Compliance & Risk Champion

RxBenefits, Inc.; Nebraska; Remote; USD 81,000 - 101,000; Full time

Benefits offered by this job

Remote first work environment

HDHP or PPO medical plan (premium paid

Dental, Vision, Disability, Life_ins

401(k) with employer match

Paid Holidays

Internet reimbursements

Tuition Reimbursement

Paid New Parent Leave

Pet insurance

Mental health benefit

EAP with Spring Health

Job summary

RxBenefits, Inc. is seeking a GRC Analyst to coordinate and execute corporate compliance initiatives in collaboration with security and compliance teams.

The role emphasizes strong program management, attention to detail, and the ability to multi-task while advancing the company’s compliance vision. The ideal candidate will bring 3+ years in Audit, Risk or Compliance, experience with HIPAA controls and SSAE/SOC1/SOC2, and the ability to influence partners across the organization.

Qualifications

• Bachelor's degree or relevant equivalent experience.
• 3+ years in Audit, Risk or Compliance.
• 3+ years in HIPAA controls, SSAE, SOC1/SOC2.
• Detail-oriented with strong multitasking.
• Strong written and verbal communication to influence management.
• Self-starter with energy and adaptability.

Responsibilities

• Identify and maintain high-value assets and threats for risk mitigation.
• Document and maintain enterprise processes to reduce security risk.
• Perform routine/ad-hoc security risk assessments.
• Maintain the GRC platform documentation.
• Produce risk reports for executives.
• Prepare for and assist audits.
• Evaluate control deficiencies and drive business impact.
• Respond to security questionnaire/audit requests with clients.
• Exercise judgment to influence partners.
• Balance business strategy with risk controls.
• Stay updated on audit/compliance trends.
• Manage 3rd party vendor assessment and compliance.
• Assist development of policies, procedures, and standards.
• All other duties as assigned.

Skills

Audit experience

Risk experience

Compliance experience

HIPAA controls

SOC1 SOC2

Detail-oriented

Communication skills

Education

Bachelor's degree or equivalent

Tools

ITGC knowledge

NIST framework

ISO framework

COBIT framework

Job description

RxBenefits, Inc. is seeking a GRC Analyst to coordinate and execute corporate compliance initiatives in collaboration with security and compliance teams.

The role emphasizes strong program management, attention to detail, and the ability to multi-task while advancing the company’s compliance vision. The ideal candidate will bring 3+ years in Audit, Risk or Compliance, experience with HIPAA controls and SSAE/SOC1/SOC2, and the ability to influence partners across the organization.