Remote GRC Analyst — Risk & Compliance Lead

RxBenefits, Inc.; Tennessee; Remote; USD 81,000 - 101,000; Full time

Benefits offered by this job

Remote-first

HDHP or PPO medical plans with 100% of

Dental & Vision insurance

Disability & Life Insurance

Tuition Reimbursement

Holiday & time-off benefits

Internet reimbursement

Mental health support

Job summary

RxBenefits, Inc. is seeking a GRC Analyst to coordinate corporate compliance initiatives and work with security and compliance teams to implement the company’s compliance vision.

You will identify high-value assets, assess risks, maintain the GRC platform, and produce risk reports for executives. You will also manage third-party vendor assessments while staying current with HIPAA, SSAE, SOC1 and SOC2 controls. Remote-first role in Tennessee with strong attention to detail.

Qualifications

• Bachelor’s degree or relevant equivalent experience.
• 3+ years of Audit, Risk or Compliance experience.
• 3+ years of experience with HIPAA regulatory controls, SSAE, SOC1 and SOC2.
• Detail-oriented with ability to identify patterns across populations.

Responsibilities

• Coordinate and independently execute corporate compliance initiatives.
• Maintain list of high-value assets and associated threats to ensure risk mitigation.
• Document and maintain enterprise-wide processes to reduce security risk and mature controls.
• Perform routine or ad-hoc security risk assessments as needed.
• Assist with development and maintenance of the GRC platform and controls documentation.
• Produce periodic risk reports to inform executives of the health of the program.
• Evaluate impact of control deficiencies and drive business impact.
• Manage 3rd party vendor assessment and compliance.
• Stay up to date with latest audit and compliance trends.

Skills

Audit & risk

HIPAA controls

SOC1/SOC2 controls

Regulatory knowledge

Detail orientation

Education

Bachelor's degree or equivalent

Tools

GRC platform

Job description

RxBenefits, Inc. is seeking a GRC Analyst to coordinate corporate compliance initiatives and work with security and compliance teams to implement the company’s compliance vision.

You will identify high-value assets, assess risks, maintain the GRC platform, and produce risk reports for executives. You will also manage third-party vendor assessments while staying current with HIPAA, SSAE, SOC1 and SOC2 controls. Remote-first role in Tennessee with strong attention to detail.