Remote GRC Analyst: Risk, Compliance & Audit Lead

RxBenefits, Inc.; Washington (District of Columbia); Remote; USD 81,000 - 101,000; Full time

Benefits offered by this job

Remote first work environment

HDHP or PPO medical plan (100% premium

Dental, Vision, Disability, Life

401(k) with employer match

Tuition Reimbursement

Paid New Parent Leave

Pet insurance

Mental health benefits via Spring/ER

Job summary

RxBenefits, Inc. is seeking a GRC Analyst to coordinate corporate compliance initiatives and collaborate with security teams. The role emphasizes risk assessment, control design, and assisting audits to support the company’s compliance vision.

The ideal candidate has 3+ years in audit, risk or compliance, with HIPAA controls and SSAE/SOC experience, and can manage multiple work streams in a dynamic environment. Remote-first, with national scope benefits.

Qualifications

• Bachelor’s degree or relevant equivalent experience.
• 3+ years of Audit, Risk or Compliance experience.
• 3+ years of experience with HIPAA regulatory controls, SSAE, SOC1 and SOC2.
• Ability to juggle multiple work efforts and quickly change direction.
• Detail-oriented with ability to identify risk across populations.
• Strong communication skills to influence management and drive change.
• Self-starter with high energy and flexibility.

Responsibilities

• Coordinate and execute corporate compliance initiatives with security and compliance teams.
• Identify and maintain high-value assets and associated threats for risk mitigation.
• Document and maintain enterprise processes to support risk controls.
• Perform routine/ad-hoc security risk assessments as needed.
• Maintain the GRC platform documenting controls and risk information.
• Produce views/reports of security risk for executives.
• Assist with internal and external audits and responses.
• Evaluate control deficiencies and drive actionable business impact.
• Collaborate with RxBenefits clients on security questionnaires and audits.
• Stay updated on audit/compliance trends and best practices.
• Manage 3rd party vendor assessment and compliance.
• Assist in policy, procedure, and standards development.

Skills

Audit

Risk management

Compliance

HIPAA controls

SOC 1 SOC 2

SSAE

Communication

Project management

Analytical skills

Education

Bachelor’s degree or equivalent

Tools

GRC platform

IT general controls tooling

Job description

RxBenefits, Inc. is seeking a GRC Analyst to coordinate corporate compliance initiatives and collaborate with security teams. The role emphasizes risk assessment, control design, and assisting audits to support the company’s compliance vision.

The ideal candidate has 3+ years in audit, risk or compliance, with HIPAA controls and SSAE/SOC experience, and can manage multiple work streams in a dynamic environment. Remote-first, with national scope benefits.