Remote GRC Analyst - HITRUST, SOC2 & IT Security Risk

ExamWorks, Inc.; Atlanta (GA); Remote; USD 80,000 - 110,000; Full time

Job summary

ExamWorks is seeking an experienced GRC Analyst to strengthen our information security program. The role is 100% remote and can be located anywhere in the United States, with a standard Monday–Friday schedule.

Responsibilities include implementing and documenting security controls, supporting HITRUST, SOC 2 audits, vendor risk assessments, and policy development. The ideal candidate has a college degree and at least five years in IT security and compliance.

Qualifications

• 5+ years in IT security, risk management, compliance, and audit.
• Subject matter expert knowledge on compliance and security framework standards such as SOX, PCI, SOC, NIST, ISO 27001, HITRUST, HIPAA and HITECH.
• Experience coordinating compliance audit processes and IT security risk assessment programs.
• Ability to articulate IT security policies, processes, and technical controls.

Responsibilities

• Assessment, implementation, management, and documentation of security controls across the information security program.
• Advocate an effective security program including risk assessment, testing, and policy development.
• Facilitate HITRUST, SOC2 audit engagement, data collection, exception remediation and monitoring.
• Respond to client assessments and RFPs, conduct vendor risk assessments and reassessments.
• Participate in cross-training sessions with IT Security team on tools and technical controls.

Skills

IT security

Risk management

Compliance

Audit

Communication

Education

Bachelor's degree in Computer Science or related field

Job description

ExamWorks is seeking an experienced GRC Analyst to strengthen our information security program. The role is 100% remote and can be located anywhere in the United States, with a standard Monday–Friday schedule.

Responsibilities include implementing and documenting security controls, supporting HITRUST, SOC 2 audits, vendor risk assessments, and policy development. The ideal candidate has a college degree and at least five years in IT security and compliance.