Remote GRC Analyst — Risk & Compliance Lead

RxBenefits, Inc.; Minnesota; Remote; USD 81,000 - 101,000; Full time

Benefits offered by this job

HDHP/PPO Medical

Dental & Vision

Disability insurance

Life insurance

Tuition reimbursement

Remote-first

Internet reimbursement

Equipment provided

Mental health support

Holidays

Job summary

RxBenefits, Inc. is seeking a GRC Analyst to coordinate and execute corporate compliance initiatives and work closely with security and compliance teams. The role focuses on risk assessment, controls design, and policy development to support the company’s compliance vision.

You will manage third-party assessments and produce risk reports for executives. The ideal candidate has 3+ years in audit, risk, or compliance, with HIPAA controls and SSAE/SOC experience.

Qualifications

• Bachelor’s degree or relevant equivalent experience.
• 3+ years of Audit, Risk or Compliance experience.
• Experience with HIPAA regulatory controls, SSAE, SOC1 and SOC2.
• Ability to work in detail while identifying risks across populations.

Responsibilities

• Coordinate and independently execute corporate compliance initiatives.
• Identify and maintain high-value assets and associated threats.
• Document and maintain processes to reduce security risk.
• Perform routine or ad-hoc security risk assessments.
• Assist with development of policies, procedures, and standards.
• Manage 3rd party vendor assessment and compliance.
• Produce periodic risk reports for executives.
• Stay up to date with audit and compliance trends.

Skills

Audit experience

Risk management

Program management

Compliance programs

Education

Bachelor’s degree

Tools

GRC platforms

Job description

RxBenefits, Inc. is seeking a GRC Analyst to coordinate and execute corporate compliance initiatives and work closely with security and compliance teams. The role focuses on risk assessment, controls design, and policy development to support the company’s compliance vision.

You will manage third-party assessments and produce risk reports for executives. The ideal candidate has 3+ years in audit, risk, or compliance, with HIPAA controls and SSAE/SOC experience.