Remote GRC Analyst: Risk & Compliance Lead

RxBenefits, Inc.; Lexington (KY); Remote; USD 81,000 - 101,000; Full time

Benefits offered by this job

Remote first work environment

HDHP or PPO medical plan (premiums 100

Dental, Vision, Disability, Life

401(k) with employer match

Tuition Reimbursement

Paid New Parent Leave

Pet insurance

Mental health benefit

Holiday & floating days

Job summary

RxBenefits, Inc. is seeking a GRC Analyst to coordinate and execute corporate compliance initiatives, working closely with security and compliance teams to implement RxBenefits' compliance vision.

The role requires strong program and project management skills, attention to detail, and the ability to multi-task across regulatory controls such as HIPAA, SSAE, SOC1 and SOC2. A results-driven mindset and effective communication are essential.

Qualifications

• Bachelor’s degree or relevant equivalent experience.
• 3+ years of Audit, Risk or Compliance experience.
• 3+ years of experience with HIPAA regulatory controls, SSAE, SOC1 and SOC2.
• Ability to juggle multiple work efforts and to quickly change direction.
• Ability to look broadly across a population and develop connections and themes identifying risk and concerns.

Responsibilities

• Identify and maintain assets and vulnerabilities to mitigate risk.
• Document and maintain enterprise security processes to support risk mitigation.
• Perform routine or ad-hoc security risk assessments as needed.
• Maintain the GRC platform to document controls and risk information.
• Produce periodic risk reports for executives on the health of the program and risk position.
• Assist with internal and external audits responses.
• Evaluate impact of control deficiencies to drive business impact.
• Respond to security questionnaire/audit requests with RxBenefits Clients.
• Stay up to date with audit and compliance trends.
• Manage 3rd party vendor assessment and compliance.
• Assist with development of policies, procedures, and standards.

Skills

Audit experience

Risk management

HIPAA controls

Regulatory compliance

Analytical skills

Education

Bachelor’s degree or relevant equivalent experience

Job description

RxBenefits, Inc. is seeking a GRC Analyst to coordinate and execute corporate compliance initiatives, working closely with security and compliance teams to implement RxBenefits' compliance vision.

The role requires strong program and project management skills, attention to detail, and the ability to multi-task across regulatory controls such as HIPAA, SSAE, SOC1 and SOC2. A results-driven mindset and effective communication are essential.