Remote GRC Analyst: Risk & Compliance Leader

RxBenefits, Inc.; New York (NY); Remote; USD 81,000 - 101,000; Full time

Benefits offered by this job

Remote first

HDHP/PPO medical

Dental, Vision

Short- and Long-Term Disability

Life Insurance

401(k) with employer match

Tuition Reimbursement

Paid New Parent Leave

Pet insurance

Mental health benefit

EAP

Holiday leave

Job summary

RxBenefits, Inc. is seeking a GRC Analyst to coordinate and execute corporate compliance initiatives in partnership with the security and compliance teams.

The role requires strong program and project management, high attention to detail, and the ability to multi-task. Responsibilities include risk assessments, maintaining controls across the enterprise, supporting audits, interfacing with clients and external firms, and staying current with industry trends.

Qualifications

• 3+ years of Audit, Risk or Compliance experience.
• 3+ years of experience with HIPAA regulatory controls, SSAE, SOC1 and SOC2.
• Ability to juggle multiple work efforts and to quickly change direction.
• Ability to work in a very detailed manner as well as to look broadly across a population and develop connections and themes identifying risk and concerns.
• Sound organizational, analytical, oral, and written communication skills – Ability to successfully communicate to influence management and lead change in both strategic and tactical initiatives.
• Self-starter, desire to learn, able to teach others, high energy, positive attitude, exhibits flexibility.

Responsibilities

• Coordinate and independently execute corporate compliance initiatives.
• Work with RxBenefits teams to identify and maintain a list of high-value assets and their associated threats and vulnerabilities to ensure effective risk mitigation.
• Document and maintain processes across the enterprise to reduce security risk; design and mature security controls to support risk mitigation.
• Perform routine or ad-hoc security risk assessments on various topics as needed.
• Assist in maintaining the GRC platform to document controls, risk information, and other related details.
• Produce periodic views/reports of security risk to inform executives of the health of the program and the company’s risk position.
• Prepare for and assist with responding to internal and external audits.
• Evaluate impact of all control deficiencies in an audit and refine documentation to drive business impact.
• Work with RxBenefits Clients to respond to security questionnaire and audit report requests.
• Stay up to date with latest audit and compliance trends.
• Manage 3rd party vendor assessment and compliance.
• Assist with development of policies, procedures, and standards.

Skills

Audit experience

Risk management

Compliance management

Communication skills

Analytical thinking

Project management

Multi-tasking

Detail-oriented

Education

Bachelor’s degree or relevant equivalent experience

Job description

RxBenefits, Inc. is seeking a GRC Analyst to coordinate and execute corporate compliance initiatives in partnership with the security and compliance teams.

The role requires strong program and project management, high attention to detail, and the ability to multi-task. Responsibilities include risk assessments, maintaining controls across the enterprise, supporting audits, interfacing with clients and external firms, and staying current with industry trends.