Remote GRC Analyst - HIPAA, SOC2 & Risk Controls

RxBenefits, Inc.; Central City (CO); Remote; USD 81,000 - 101,000; Full time

Benefits offered by this job

HDHP/PPO plan

Dental & Vision

Disability insurance

Life insurance

Internet reimbursement

Equipment provided

Tuition reimbursement

Mental health support

Community service day

Holidays & floating day

Job summary

RxBenefits, Inc. is seeking a GRC Analyst to coordinate and independently execute corporate compliance initiatives. You will work closely with security and compliance teams to implement RxBenefits’s compliance vision and mitigate risk.

The ideal candidate has strong program and project management skills, attention to detail, and 3+ years in audit, risk, or compliance, including HIPAA controls and SOC requirements. Remote-first environment with comprehensive benefits is offered.

Qualifications

• Bachelor’s degree or relevant equivalent experience.
• 3+ years of Audit, Risk or Compliance experience.
• 3+ years of experience with HIPAA regulatory controls, SSAE, SOC1 and SOC2.

Responsibilities

• Coordinate and independently execute corporate compliance initiatives.
• Work with RxBenefits teams to identify and maintain a list of high‑value assets and associated threats and vulnerabilities.
• Document and maintain enterprise processes to reduce security risk and mature security controls.
• Perform routine or ad‑hoc security risk assessments as needed.
• Assist in maintaining the GRC platform to document controls and risk information.
• Produce periodic risk reports for executives on the health of the program.
• Evaluate impact of control deficiencies in audits and drive actionable business impact.
• Stay up to date with audit and compliance trends.
• Manage 3rd party vendor assessment and compliance.
• Assist with development of policies, procedures, and standards.

Skills

Audit & risk assessment

Compliance programs

HIPAA controls

Policy development

Education

Bachelor’s degree or relevant equivalent experience

Job description

RxBenefits, Inc. is seeking a GRC Analyst to coordinate and independently execute corporate compliance initiatives. You will work closely with security and compliance teams to implement RxBenefits’s compliance vision and mitigate risk.

The ideal candidate has strong program and project management skills, attention to detail, and 3+ years in audit, risk, or compliance, including HIPAA controls and SOC requirements. Remote-first environment with comprehensive benefits is offered.