Remote GRC Analyst: HITRUST & SOC 2 Compliance

Cybersecurity Jobs; Atlanta (GA); Remote; USD 60,000 - 90,000; Full time

Benefits offered by this job

Medical, Vision, and Dental insurance

Paid time off

401k

Job summary

ExamWorks is seeking an experienced GRC Analyst to support governance, risk management, and compliance across the organization and subsidiaries. This role is 100% remote within the United States and supports HITRUST and SOC 2 engagements.

The GRC Analyst will assess, implement, manage, and document security controls aligned to ExamWorks’ information security strategy and compliance expectations. Collaboration with IT Security, audits, and vendor risk assessments are integral to the position.

Qualifications

• 5+ years of experience across IT security, risk management, compliance, and audit.
• Strong knowledge of SOX, PCI, SOC, NIST, ISO 27001, HITRUST, HIPAA, and HITECH.
• Experience coordinating compliance audit processes.
• Ability to articulate IT security policies, processes, and technical controls.
• Input on controls design, implementation, and remediation.
• Excellent written and verbal communication skills.

Responsibilities

• Assess, implement, manage, and document security controls supporting ExamWorks and subsidiary information security strategy and compliance requirements.
• Promote an effective security program, including system-wide security analysis, intrusion and vulnerability detection, standards and testing, risk assessment, awareness and education, and the development of policies, standards, and procedures.
• Support HITRUST and SOC 2 audit engagements through data and artifact collection, exception remediation, and ongoing monitoring.
• Respond to client assessments and RFPs, and conduct vendor risk assessments as well as reassessments.
• Participate in cross-training sessions with the IT Security team focused on management and configuration of security tools and technical controls.

Skills

IT security

Risk management

Compliance

Audit

Security policies

Education

College Degree in Computer Science or related field

Job description

ExamWorks is seeking an experienced GRC Analyst to support governance, risk management, and compliance across the organization and subsidiaries. This role is 100% remote within the United States and supports HITRUST and SOC 2 engagements.

The GRC Analyst will assess, implement, manage, and document security controls aligned to ExamWorks’ information security strategy and compliance expectations. Collaboration with IT Security, audits, and vendor risk assessments are integral to the position.