Remote GRC Analyst: Healthcare Compliance & Audit

Ceresti Health; Oregon; Hybrid; USD 80,000 - 110,000; Full time

Benefits offered by this job

Health, dental, vision benefits

Equity participation

PTO and a respectful work culture

Remote work

Job summary

Ceresti Health is seeking a GRC Analyst to turn security and privacy activities into audit-ready evidence for SOC 2, HITRUST, and HIPAA obligations. You will work with Security, IT, Engineering, and Operations to gather evidence, update policies, and support the privacy program.

This role targets early-career professionals who are organized, write clearly, and want to learn how a regulated healthcare company earns and maintains certifications. Remote-friendly and collaborative environment.

Qualifications

• 1–3 years in governance, risk, compliance, or audit.
• Working knowledge of SOC 2, HITRUST, or HIPAA, and willingness to learn the others.
• Clear, precise writing and meticulous attention to detail.
• Ability to follow up with colleagues for evidence.

Responsibilities

• Audit evidence and control documentation.
• Policy and vendor risk management.
• Privacy and data lifecycle support.
• Support HIPAA and other healthcare compliance obligations.

Skills

GRC experience

Audit

Technical writing

Attention to detail

Job description

Ceresti Health is seeking a GRC Analyst to turn security and privacy activities into audit-ready evidence for SOC 2, HITRUST, and HIPAA obligations. You will work with Security, IT, Engineering, and Operations to gather evidence, update policies, and support the privacy program.

This role targets early-career professionals who are organized, write clearly, and want to learn how a regulated healthcare company earns and maintains certifications. Remote-friendly and collaborative environment.