Remote GRC Analyst: HIPAA, SOC2 & Risk Controls

RxBenefits, Inc.; Eagle (ID); Remote; USD 81,000 - 101,000; Full time

Benefits offered by this job

Remote first work environment

HDHP or PPO medical plan (RxBenefits-s

Dental, Vision, Disability, Life — 100

401(k) with employer match 3.5%

Tuition Reimbursement

Paid New Parent Leave

Pet insurance

Mental health benefit & EAP

Job summary

RxBenefits, Inc. is seeking a GRC Analyst to coordinate and execute compliance initiatives across our security and compliance teams. You will help design controls, perform risk assessments, and support audits with a strong attention to detail.

The role requires 3+ years in Audit/Compliance, experience with HIPAA controls, SSAE, SOC1/SOC2, and solid project management. Remote-first environment with nationwide scope.

Qualifications

• Bachelor’s degree or relevant equivalent experience.
• 3+ years of Audit, Risk or Compliance experience.
• 3+ years of experience with HIPAA regulatory controls, SSAE, SOC1 and SOC2
• Ability to juggle multiple work efforts and to quickly change direction
• Ability to work in a detailed manner and see connections across a population

Responsibilities

• Coordinate and execute corporate compliance initiatives.
• Maintain processes to reduce security risk and mature security controls.
• Perform routine or ad-hoc security risk assessments.
• Assist in maintaining the GRC platform and risk information.
• Produce periodic risk reports for executives.
• Assist with responding to audits and audit requests.
• Evaluate control deficiencies and drive business impact.
• Respond to security questionnaires and audit reports from RxBenefits Clients.
• Stay up to date with audit and compliance trends.
• Manage 3rd party vendor assessments.

Skills

Audit & Compliance

HIPAA Controls

Project Management

Multitasking

Detail-oriented

Communication skills

Education

Bachelor’s degree or relevant equivalent experience

Tools

NIST

ISO

COBIT

Job description

RxBenefits, Inc. is seeking a GRC Analyst to coordinate and execute compliance initiatives across our security and compliance teams. You will help design controls, perform risk assessments, and support audits with a strong attention to detail.

The role requires 3+ years in Audit/Compliance, experience with HIPAA controls, SSAE, SOC1/SOC2, and solid project management. Remote-first environment with nationwide scope.