Remote GRC Analyst: HIPAA & Audit Readiness

RxBenefits, Inc.; Wilmington (VT); Remote; USD 81,000 - 101,000; Full time

Benefits offered by this job

Remote first

HDHP or PPO medical plan

Dental, Vision, Disability, Life

401(k) with company match

Tuition reimbursement

Paid new parent leave

Pet insurance

Mental health benefit

Job summary

RxBenefits, Inc. is seeking a GRC Analyst to coordinate and execute corporate compliance initiatives. You will work with security and compliance teams to implement RxBenefits compliance vision, managing risk across assets and controls.

We value strong program management, attention to detail, and the ability to multi-task while communicating effectively with executives and business partners.

Qualifications

• Bachelor’s degree or relevant equivalent experience
• 3+ years of Audit, Risk or Compliance experience
• 3+ years of HIPAA regulatory controls, SSAE, SOC1 and SOC2
• Ability to juggle multiple work efforts and to quickly change direction
• Ability to work in a very detailed manner and see broader risk patterns
• Strong organizational, analytical, oral, and written communication skills

Responsibilities

• Identify and maintain high-value assets with threats and vulnerabilities for risk mitigation
• Document and maintain enterprise processes to reduce security risk and mature controls
• Perform routine or ad-hoc security risk assessments
• Maintain the GRC platform to document controls and risk information
• Produce periodic risk views/reports for executives
• Assist with responding to internal and external audits
• Evaluate impact of control deficiencies and drive actionable business impact
• Respond to security questionnaires and audit reports with RxBenefits Clients
• Stay up to date with audit and compliance trends
• Manage 3rd party vendor assessments and compliance
• Develop policies, procedures, and standards

Skills

Audit, Risk or Compliance experience

HIPAA controls

SSAE SOC1 SOC2 knowledge

Strong attention to detail

Analytical communication

Project management

Education

Bachelor’s degree or relevant equivalent experience

Tools

IT general controls frameworks (NIST ISO COBIT)

Job description

RxBenefits, Inc. is seeking a GRC Analyst to coordinate and execute corporate compliance initiatives. You will work with security and compliance teams to implement RxBenefits compliance vision, managing risk across assets and controls.

We value strong program management, attention to detail, and the ability to multi-task while communicating effectively with executives and business partners.