Remote GRC Analyst: Risk & Compliance Champion

RxBenefits, Inc.; United States; Remote; USD 81,000 - 101,000; Full time

Benefits offered by this job

Remote-first environment

HDHP or PPO medical plan

Dental & Vision insurance

Disability & Life insurance

401(k) with match up to 3.5%

Community Service Day

Company holidays

Internet reimbursement

Tuition reimbursement

New parent leave

Pet insurance

Mental health benefits

Job summary

RxBenefits, Inc. is seeking a GRC Analyst to coordinate and execute corporate compliance initiatives, working closely with security and compliance teams.

The role emphasizes risk assessment, control design, and audit support while enabling ongoing governance across the enterprise. The ideal candidate has 3+ years in audit/risk/compliance, strong HIPAA controls experience, and the ability to manage multiple efforts with attention to detail and effective communication.

Qualifications

• 3+ years of Audit, Risk or Compliance experience.
• 3+ years of experience with HIPAA regulatory controls, SSAE, SOC1 and SOC2.
• Ability to juggle multiple work efforts and to quickly change direction.
• Ability to work in a very detailed manner as well as to look broadly across a population and develop connections and themes identifying risk and concerns.
• Sound organizational, analytical, oral, and written communication skills – Ability to successfully communicate to influence management and lead change in both strategic and tactical initiatives.
• Self-starter, desire to learn, able to teach others, high energy, positive attitude, exhibits flexibility.

Responsibilities

• Coordinate and execute corporate compliance initiatives with security and compliance teams.
• Identify and maintain a list of high-value assets and their associated threats and vulnerabilities to ensure effective risk mitigation.
• Document and maintain enterprise processes to reduce security risk; work with partners across the organization to design and mature security controls to support the mitigation of risks.
• Perform routine or ad-hoc security risk assessments on various topics as needed or in response to management requests.
• Assist in maintaining the GRC platform to document controls, risk information, and other related details.
• Produce periodic views/reports of security risk to inform executives of the health of the program and of the company’s risk position.
• Prepare for and assists with responding to internal and external audits.
• Evaluates impact of all control deficiencies in an audit, expands and refines control deficiency documentation to drive actionable business impact.
• Work with RxBenefits Clients to respond to security questionnaire and/or audit report requests.
• Exercises judgment and critical thinking to influence business partners.
• Helps business partners balance their business strategy with appropriate risk management controls.
• Stay up to date with latest audit and compliance trends.
• Manages 3rd party vendor assessment and compliance.
• Assist with development of policies, procedures, and standards.
• All other duties as assigned.

Skills

Audit experience

Risk management

HIPAA controls

SSAE SOC2

Multitasking

Communication skills

Self-starter

Job description

RxBenefits, Inc. is seeking a GRC Analyst to coordinate and execute corporate compliance initiatives, working closely with security and compliance teams.

The role emphasizes risk assessment, control design, and audit support while enabling ongoing governance across the enterprise. The ideal candidate has 3+ years in audit/risk/compliance, strong HIPAA controls experience, and the ability to manage multiple efforts with attention to detail and effective communication.