Remote GRC Analyst - Risk, Compliance & Audit

Radicle Health; Oregon; Hybrid; USD 95,000 - 105,000; Full time

Benefits offered by this job

Unlimited PTO

Health coverage

401k matching

Paid holidays

Volunteer time off

Parental leave

Remote stipend

Job summary

Radicle Health is seeking a GRC Analyst to strengthen governance, risk, and compliance programs. You will identify risks, assess controls, and ensure alignment with SOC 2, ISO 27001, HIPAA, and FedRAMP requirements while protecting sensitive data and supporting audits.

In this role you will work with multiple teams to maintain policies, track mitigations, and report to leadership. Remote-friendly, with a focus on reliable, compliant operations across our organization.

Qualifications

• Bachelor's degree or equivalent experience in a related field.
• 3-5 years in GRC, risk management, compliance, or audit roles.
• Familiarity with SOC 2, ISO 27001, HIPAA, FedRAMP.
• Strong organizational skills and cross-functional collaboration.
• GovRAMP/StateRAMP/FedRAMP experience is a plus.

Responsibilities

• Conduct risk reviews and maintain a risk register.
• Support risk assessments across processes and systems.
• Develop risk mitigation plans with stakeholders.
• Build risk metrics and executive-level reporting.
• Monitor regulatory compliance and internal controls.
• Coordinate evidence for audits and readiness.
• Collaborate with teams to achieve audit outcomes with no material findings.
• Review and update GRC policies regularly.
• Support or lead compliance and security training initiatives.
• Distribute awareness materials on key topics.
• Maintain secure documentation for audits and investigations.

Skills

GRC Analyst

Governance

Risk management

Compliance

Audit support

Regulatory frameworks

Stakeholder partnership

GovRAMP/StateRAMP/FedRAMP

Education

Bachelor's degree in Business/Info Security/Risk Management

Tools

GRC platforms

Audit tooling

Job description

Radicle Health is seeking a GRC Analyst to strengthen governance, risk, and compliance programs. You will identify risks, assess controls, and ensure alignment with SOC 2, ISO 27001, HIPAA, and FedRAMP requirements while protecting sensitive data and supporting audits.

In this role you will work with multiple teams to maintain policies, track mitigations, and report to leadership. Remote-friendly, with a focus on reliable, compliant operations across our organization.