Remote GRC Analyst: Risk, Compliance & Audit

RxBenefits, Inc.; Phoenix (AZ); Remote; USD 81,000 - 101,000; Full time

Benefits offered by this job

Remote first environment

HDHP or PPO medical plan

Dental and Vision insurance

Disability insurance

Life insurance

Buy-up options for disability & life

401(k) with employer match

Community Service Day

Company holidays + floating holiday

Internet reimbursement

Tuition reimbursement

New parent leave

Pet insurance

Mental health benefits (EAP Spring Hea

Job summary

RxBenefits, Inc. is seeking a GRC Analyst to coordinate and execute corporate compliance initiatives. You will partner with security and compliance teams to implement the company’s compliance vision and drive risk reduction across the enterprise.

The role requires 3+ years in audit/risk/compliance, HIPAA controls, and experience with SSAE, SOC1 and SOC2. A bachelor’s degree or equivalent is required, with strong project management and communication skills.

Qualifications

• Bachelor’s degree or relevant equivalent experience.
• 3+ years of Audit, Risk or Compliance experience.
• 3+ years of experience with HIPAA regulatory controls, SSAE, SOC1 and SOC2.
• Ability to juggle multiple work efforts and to quickly change direction.
• Ability to work in a very detailed manner as well as to look broadly across a population and develop connections and themes identifying risk and concerns.
• Sound organizational, analytical, oral, and written communication skills – Ability to successfully communicate to influence management and lead change in both strategic and tactical initiatives.
• Self-starter, desire to learn, able to teach others, high energy, positive attitude, exhibits flexibility.

Responsibilities

• Coordinate and independently execute corporate compliance initiatives.
• Work with RxBenefits teams to identify and maintain high-value assets and associated threats.
• Document and maintain enterprise processes to reduce security risk and mature security controls.
• Perform routine or ad-hoc security risk assessments.
• Assist in maintaining the GRC platform to document controls and risk information.
• Produce periodic views/reports of security risk for executives.
• Prepare for and assist with audits.
• Evaluate impact of control deficiencies and drive business impact.
• Work with clients to respond to security questionnaires or audit reports.
• Balance business strategy with appropriate risk management controls.
• Stay up to date with audit and compliance trends.
• Manage 3rd party vendor assessment and compliance.
• Assist with development of policies, procedures, and standards.

Skills

HIPAA controls

SOC1/SOC2

IT general controls

Audit & Compliance

Vendor risk mgmt

Policy development

Stakeholder comms

Detail-oriented

Project management

Self-starter

Education

Bachelor’s degree or equivalent

Job description

RxBenefits, Inc. is seeking a GRC Analyst to coordinate and execute corporate compliance initiatives. You will partner with security and compliance teams to implement the company’s compliance vision and drive risk reduction across the enterprise.

The role requires 3+ years in audit/risk/compliance, HIPAA controls, and experience with SSAE, SOC1 and SOC2. A bachelor’s degree or equivalent is required, with strong project management and communication skills.