Remote GRC Analyst - Risk & Compliance Lead

RxBenefits, Inc.; Virginia Beach (VA); Remote; USD 81,000 - 101,000; Full time

Benefits offered by this job

Remote first work environment

401(k) matching up to 3.5%

Tuition Reimbursement

Paid New Parent Leave

Pet insurance

Mental health support

Job summary

RxBenefits, Inc. seeks a GRC Analyst to coordinate and execute corporate compliance initiatives with the security and compliance teams.

This role emphasizes risk assessments, policy development, audits, and 3rd-party vendor assessments to strengthen the company’s controls and governance. The ideal candidate has a bachelor’s degree or equivalent, 3+ years in audit/risk/compliance, and hands-on HIPAA, SSAE, SOC1/SOC2 experience, plus strong project-management and communication skills.

Qualifications

• Bachelor’s degree or relevant equivalent experience.
• 3+ years of Audit, Risk or Compliance experience.
• 3+ years of experience with HIPAA regulatory controls, SSAE, SOC1 and SOC2.
• Ability to juggle multiple work efforts and to quickly change direction.
• Ability to work in a very detailed manner as well as to look broadly across a population and develop connections and themes identifying risk and concerns.
• Sound organizational, analytical, oral, and written communication skills – Ability to successfully communicate to influence management and lead change in both strategic and tactical initiatives.
• Self-starter, desire to learn, able to teach others, high energy, positive attitude, exhibits flexibility.

Responsibilities

• Work with RxBenefits teams to identify and maintain a list of high-value assets and their associated threats and vulnerabilities to ensure effective risk mitigation.
• Document and maintain processes across the enterprise to reduce security risk; work with partners across the organization to design and mature security controls to support the mitigation of risks.
• Perform routine or ad-hoc security risk assessments on various topics as needed or in response to management requests.
• Assist in maintaining the GRC platform to document controls, risk information, and other related details.
• Produce periodic views/ reports of security risk to inform executives of the health of the program and of the company’s risk position.
• Prepare for and assists with responding to internal and external audits.
• Evaluates impact of all control deficiencies in an audit, expands and refines control deficiency documentation to drive actionable business impact.
• Work with RxBenefits Clients to respond to security questionnaire and/or audit report requests.
• Exercises judgment and critical thinking to influence business partners.
• Helps business partners balance their business strategy with appropriate risk management controls.
• Stay up to date with latest audit and compliance trends.
• Manages 3rd party vendor assessment and compliance.
• Assist with development of policies, procedures, and standards.
• All other duties as assigned.

Education

Bachelor’s degree or relevant equivalent experience

Job description

RxBenefits, Inc. seeks a GRC Analyst to coordinate and execute corporate compliance initiatives with the security and compliance teams.

This role emphasizes risk assessments, policy development, audits, and 3rd-party vendor assessments to strengthen the company’s controls and governance. The ideal candidate has a bachelor’s degree or equivalent, 3+ years in audit/risk/compliance, and hands-on HIPAA, SSAE, SOC1/SOC2 experience, plus strong project-management and communication skills.