Remote GRC Analyst: Risk & Compliance Champion

RxBenefits, Inc.; Phoenix (AZ); Remote; USD 81,000 - 101,000; Full time

Benefits offered by this job

Remote-first environment

HDHP or PPO medical plan, premiums 100

Dental & Vision coverage 100% premium

Short/Long-Term Disability coverage (

Life Insurance 100% premiums

Tuition Reimbursement

Mental health benefit

Community Service Day

Company holidays

Job summary

RxBenefits, Inc. is seeking a GRC Analyst to coordinate corporate compliance initiatives and work closely with security and compliance teams to execute the company’s compliance vision.

The ideal candidate will bring strong program and project management skills and high attention to detail. You will perform risk assessments, maintain the GRC platform, report risk to executives, oversee vendor assessments, and help develop policies and standards.

Qualifications

• Bachelor's degree or equivalent experience.
• 3+ years of audit, risk or compliance experience.
• 3+ years HIPAA controls, SSAE, SOC1 and SOC2 experience.
• Ability to work in a detailed manner while identifying broader risk patterns.

Responsibilities

• Identify and maintain high-value assets and their threats to ensure risk mitigation.
• Document and maintain enterprise processes to reduce security risk and mature security controls.
• Perform routine or ad-hoc security risk assessments.
• Maintain the GRC platform to document controls and risk information.
• Produce reports on security risk for executives.
• Evaluate impact of control deficiencies and drive actionable business impact.
• Stay up to date with audit and compliance trends.
• Manage 3rd party vendor assessment and compliance.
• Assist with development of policies, procedures, and standards.

Skills

Audit/Risk/Compliance experience

HIPAA controls

SSAE SOC1 SOC2

Detail-oriented / big-picture thinking

Education

Bachelor's degree or equivalent

Tools

GRC platform

Job description

RxBenefits, Inc. is seeking a GRC Analyst to coordinate corporate compliance initiatives and work closely with security and compliance teams to execute the company’s compliance vision.

The ideal candidate will bring strong program and project management skills and high attention to detail. You will perform risk assessments, maintain the GRC platform, report risk to executives, oversee vendor assessments, and help develop policies and standards.