Remote GRC Analyst - HIPAA & IT Controls

RxBenefits, Inc.; Washington (District of Columbia); Remote; USD 81,000 - 101,000; Full time

Benefits offered by this job

Remote work

Benefits package

401(k) match

Tuition reimbursement

Paid time off

Healthcare coverage

Job summary

RxBenefits, Inc. is seeking a GRC Analyst to coordinate corporate compliance initiatives within Information Security.

This full-time role partners with security and compliance teams to implement the company’s compliance vision, manage risk assessments, and support audits across the organization. The ideal candidate brings 3+ years in Audit, Risk, or Compliance, with HIPAA controls and SOC1/SOC2 experience, plus strong communication and project management skills to influence partners and drive

Qualifications

• 3+ years of Audit, Risk or Compliance experience.
• 3+ years HIPAA controls, SSAE, SOC1 and SOC2.
• Detail-oriented with ability to multi-task and communicate clearly.
• Ability to influence management and lead change.

Responsibilities

• Coordinate and independently execute corporate compliance initiatives.
• Collaborate with security and compliance teams to implement RxBenefits compliance vision.
• Identify and maintain high-value assets and associated threats.
• Document and mature security controls to mitigate risks.
• Perform risk assessments and support audits.
• Maintain the GRC platform with controls and risk information.
• Produce reports on security risk for executives.
• Respond to internal/external audits and audit questionnaires.

Skills

Audit experience

Risk management

HIPAA controls

Regulatory compliance

Communication skills

Project management

Tools

GRC platform

Audit software

Job description

RxBenefits, Inc. is seeking a GRC Analyst to coordinate corporate compliance initiatives within Information Security.

This full-time role partners with security and compliance teams to implement the company’s compliance vision, manage risk assessments, and support audits across the organization. The ideal candidate brings 3+ years in Audit, Risk, or Compliance, with HIPAA controls and SOC1/SOC2 experience, plus strong communication and project management skills to influence partners and drive