Remote GRC Analyst - SOC 2/HITRUST/Audit Focus

Ceresti Health

United States

Remote

USD 70,000 - 100,000

Full time

4 days ago
Be an early applicant

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Benefits offered by this job

Full‑time remote
Competitive base salary
Health, dental, vision benefits
Equity participation
PTO
Collaborative, mission‑driven culture

Job summary

Ceresti Health is seeking a GRC Analyst to turn security work into auditable, evidence-based documentation supporting SOC 2, HITRUST, and HIPAA obligations. You'll report to the CISO and collaborate with Security, IT, Engineering, and Operations to gather artifacts, update policies, assess vendors, and support privacy programs.

This entry‑to‑mid level role offers exposure to the full security program in a regulated healthcare environment, with growth opportunities as you learn and contribute

Qualifications

  • 1–3 years of experience in governance, risk and compliance, audit, or a related field.
  • Working knowledge of SOC 2, HITRUST, or HIPAA; willingness to learn the others.
  • Clear, precise writing and ability to produce document‑level outputs.
  • Strong attention to detail with ability to track many items to completion.
  • Comfort following up with colleagues for evidence without being pushy.

Responsibilities

  • Audit evidence and control documentation for SOC 2 Type 2 and HITRUST.
  • Policy and vendor risk management, including policy updates and third‑party assessments.
  • Privacy and data lifecycle support for HIPAA and related obligations.

Skills

Governance, risk & compliance
SOC 2/HITRUST/HIPAA knowledge
Clear writing
Attention to detail
Stakeholder follow-up

Job description

Ceresti Health is seeking a GRC Analyst to turn security work into auditable, evidence-based documentation supporting SOC 2, HITRUST, and HIPAA obligations. You'll report to the CISO and collaborate with Security, IT, Engineering, and Operations to gather artifacts, update policies, assess vendors, and support privacy programs.

This entry‑to‑mid level role offers exposure to the full security program in a regulated healthcare environment, with growth opportunities as you learn and contribute

Get your free, confidential resume review.

or drag and drop your file here.

Similar jobs

Similar jobs worth comparing

GRC Analyst: SOC 2 & HITRUST Compliance (Early‑Career)
GRC Analyst: SOC 2 & HITRUST Compliance (Early‑Career)

Ceresti • United States

Remote
USD 65,000 - 90,000
Health, dental, and vision benefits
Equity participation
PTO
GRC Analyst (Fully Remote)
GRC Analyst (Fully Remote)

Ceresti • United States

Remote
USD 65,000 - 90,000
Health, dental, and vision benefits
Equity participation
PTO
Remote GRC Analyst - HITRUST, SOC2 & IT Security Risk
Remote GRC Analyst - HITRUST, SOC2 & IT Security Risk

ExamWorks, Inc. • Atlanta (GA)

Remote
USD 80,000 - 110,000
Remote InfoSec GRC Analyst: HITRUST & SOC2
Remote InfoSec GRC Analyst: HITRUST & SOC2

Network Medical Review Co. • Atlanta (GA)

Hybrid
USD 60,000 - 90,000
Medical, vision, dental benefits
Paid time off
401k
Remote GRC Analyst — SOC 2 & Risk Management
Remote GRC Analyst — SOC 2 & Risk Management

OpenKrill • United States

Remote
USD 92,000 - 113,000
Flexible work hours
Flexible vacation
401K match
+4
Remote GRC Lead: SOC 2, ISO 27001 & HITRUST + Equity
Remote GRC Lead: SOC 2, ISO 27001 & HITRUST + Equity

Garner Health • United States

Hybrid
USD 155,000 - 185,000
Equity
Flexible PTO
Medical/Dental/Vision
+1
Remote GRC Manager: Privacy & SOC 2/HITRUST
Remote GRC Manager: Privacy & SOC 2/HITRUST

Partner Company • United States

Remote
USD 144,000 - 175,000
Bonus
Equity
Remote GRC Analyst: HITRUST & SOC 2 Compliance
Remote GRC Analyst: HITRUST & SOC 2 Compliance

Cybersecurity Jobs • Atlanta (GA)

Remote
USD 60,000 - 90,000
Medical, Vision, and Dental insurance
Paid time off
401k
Senior GRC Analyst: Risk & Compliance Leader
Senior GRC Analyst: Risk & Compliance Leader

Cone Health • Greensboro (NC)

On-site
USD 90,000 - 130,000
Remote GRC Analyst - HIPAA & IT Controls
Remote GRC Analyst - HIPAA & IT Controls

RxBenefits, Inc. • Washington

Remote
USD 81,000 - 101,000
Remote work
Benefits package
401(k) match
+3