Remote GRC Analyst — Risk, Compliance & Audits

Remote; San Francisco (CA); Remote; USD 95,000 - 105,000; Full time

Benefits offered by this job

Unlimited PTO

Medical/Dental/Vision coverage

401k matching

Paid holidays

Volunteer time off

Paid parental leave

Remote work stipend

Job summary

Radicle Health is hiring a GRC Analyst to advance governance, risk, and compliance initiatives in a fully remote role. You will identify risks, ensure regulatory alignment, and maintain internal controls to protect assets and data.

This role partners with multiple teams to drive audit readiness and continuous improvement. Ideal candidates have 3–5 years in GRC or audit, familiarity with SOC 2, ISO 27001, HIPAA, FedRAMP, and experience with risk metrics and reporting.

Qualifications

• Strong organizational skills with attention to detail and follow-through.
• Proactive, collaborative partner across internal teams and external stakeholders.
• Familiarity with common compliance frameworks (e.g., SOC 2, ISO 27001, HIPAA, FedRAMP).
• GovRAMP, StateRAMP, or FedRAMP experience a plus.

Responsibilities

• Conduct ongoing risk reviews and maintain an up-to-date risk register.
• Support risk assessments across critical business processes and systems.
• Partner with stakeholders to develop and track risk mitigation plans through resolution.
• Assist in building risk metrics and reporting for executive-level visibility.
• Monitor adherence to relevant regulatory frameworks and internal controls.
• Support audit readiness by coordinating evidence collection and documentation.
• Partner with cross-functional teams to ensure successful audit outcomes with no material findings.
• Review and update GRC-related policies on a regular cadence.
• Support or lead compliance and security training initiatives.
• Develop and distribute awareness materials on key compliance topics.
• Maintain accurate and secure documentation for audits, investigations, and post-incident reviews

Skills

Organizational skills

Attention to detail

Cross-functional collaboration

Education

Bachelor's degree or equivalent experience

Tools

GRC platforms

Job description

Radicle Health is hiring a GRC Analyst to advance governance, risk, and compliance initiatives in a fully remote role. You will identify risks, ensure regulatory alignment, and maintain internal controls to protect assets and data.

This role partners with multiple teams to drive audit readiness and continuous improvement. Ideal candidates have 3–5 years in GRC or audit, familiarity with SOC 2, ISO 27001, HIPAA, FedRAMP, and experience with risk metrics and reporting.