Remote GRC Analyst – HIPAA/SOC2 Risk & Compliance

RxBenefits, Inc.; Hartford (CT); Remote; USD 81,000 - 101,000; Full time

Benefits offered by this job

Remote-first environment

HDHP or PPO medical plan (premium paid

Dental, Vision, Disability & Life

401(k) with employer match

Tuition reimbursement

Paid new parent leave

Pet insurance

Mental health benefits

Job summary

RxBenefits, Inc. is seeking a GRC Analyst to coordinate corporate compliance initiatives and collaborate with the security and compliance teams to execute RxBenefits’ compliance vision.

The ideal candidate will have 3+ years of Audit, Risk or Compliance experience, strong attention to detail, and the ability to manage multiple projects while advancing risk management and control activities. The role includes supporting audits, policy development, and risk reporting.

Qualifications

• Bachelor’s degree or relevant equivalent experience.
• 3+ years of Audit, Risk or Compliance experience.
• 3+ years of HIPAA, SSAE, SOC1/SOC2 controls.
• Ability to juggle multiple work efforts and to quickly change direction.
• Ability to communicate to influence management and lead change.
• Self-starter with eagerness to learn and teach others.

Responsibilities

• Identify and maintain a list of high-value assets and their threats to mitigate risk.
• Document and mature security controls across the enterprise.
• Perform routine or ad-hoc security risk assessments.
• Assist in maintaining the GRC platform to document controls and risk information.
• Produce periodic risk reports for executives.
• Assist with internal and external audits.
• Evaluate impact of control deficiencies and drive business impact.
• Respond to audit requests from RxBenefits clients.
• Stay up to date with audit and compliance trends.
• Manage 3rd party vendor assessment and compliance.
• Assist with policy development and standards.

Skills

Audit & Compliance

HIPAA controls

Risk management

Attention to detail

Communication skills

Cross-functional collaboration

Self-starter

Education

Bachelor's degree or equivalent experience

Tools

NIST/ISO/COBIT

IT general controls

Job description

RxBenefits, Inc. is seeking a GRC Analyst to coordinate corporate compliance initiatives and collaborate with the security and compliance teams to execute RxBenefits’ compliance vision.

The ideal candidate will have 3+ years of Audit, Risk or Compliance experience, strong attention to detail, and the ability to manage multiple projects while advancing risk management and control activities. The role includes supporting audits, policy development, and risk reporting.