Remote GRC Analyst - Risk, Compliance & Audit

RxBenefits, Inc.; Central City (KY); Remote; USD 81,000 - 101,000; Full time

Benefits offered by this job

Medical plan coverage

Dental coverage

Vision coverage

Disability insurance

Life insurance

Buy-up options

Community service

Company holidays

Internet reimbursement

Equipment provided

Tuition reimbursement

Mental health support

Job summary

RxBenefits, Inc. is seeking a GRC Analyst to coordinate and independently execute corporate compliance initiatives. This role collaborates with security and compliance teams and helps implement the company’s compliance vision.

The ideal candidate has strong program and project management skills, high attention to detail, and the ability to multi-task in a remote-first environment. Compensation ranges and incentives are aligned with market data and internal equity.

Qualifications

• 3+ years of Audit, Risk or Compliance experience.
• 3+ years of experience with HIPAA regulatory controls, SSAE, SOC1 and SOC2.

Responsibilities

• Work with RxBenefits teams to identify and maintain a list of high-value assets and their associated threats and vulnerabilities to ensure effective risk mitigation.
• Document and maintain processes across the enterprise to reduce security risk; work with partners across the organization to design and mature security controls to support the mitigation of risks.
• Perform routine or ad-hoc security risk assessments on various topics as needed or in response to management requests.
• Assist in maintaining the GRC platform to document controls, risk information, and other related details.
• Produce periodic views/ reports of security risk to inform executives of the health of the program and of the company’s risk position.
• Evaluates impact of all control deficiencies in an audit, expands and refines control deficiency documentation to drive actionable business impact.
• Exercises judgment and critical thinking to influence business partners.
• Helps business partners balance their business strategy with appropriate risk management controls.
• Stay up to date with latest audit and compliance trends.
• Manages 3rd party vendor assessment and compliance.
• Assist with development of policies, procedures, and standards.

Skills

Audit/Risk/Compliance experience

HIPAA controls / SSAE / SOC1 SOC2

Education

Bachelor’s degree or relevant equivalent experience

Job description

RxBenefits, Inc. is seeking a GRC Analyst to coordinate and independently execute corporate compliance initiatives. This role collaborates with security and compliance teams and helps implement the company’s compliance vision.

The ideal candidate has strong program and project management skills, high attention to detail, and the ability to multi-task in a remote-first environment. Compensation ranges and incentives are aligned with market data and internal equity.