Remote GRC & Compliance Analyst

RxBenefits, Inc.; Vermont; Remote; USD 81,000 - 101,000; Full time

Benefits offered by this job

Remote first work environment

HDHP or PPO medical plans with premium

Dental, Vision, Disability, Life fully

401(k) with employer match

Job summary

RxBenefits, Inc. seeks a GRC Analyst to coordinate corporate compliance initiatives and work closely with security and compliance teams. You will translate risk into actionable controls across the enterprise and support audits.

The role requires strong program management, attention to detail, and the ability to multi-task across initiatives while influencing business partners and guiding change.

Qualifications

• Bachelor’s degree or relevant equivalent experience.
• 3+ years of Audit, Risk or Compliance experience.
• 3+ years of experience with HIPAA regulatory controls, SSAE, SOC1 and SOC2.
• Ability to juggle multiple work efforts and to quickly change direction.
• Ability to work in a very detailed manner as well as to look broadly across a population and develop connections and themes identifying risk and concerns.
• Sound organizational, analytical, oral, and written communication skills – Ability to successfully communicate to influence management and lead change in both strategic and tactical initiatives.
• Self-starter, desire to learn, able to teach others, high energy, positive attitude, exhibits flexibility.

Responsibilities

• Identify and maintain high-value assets and their threats to mitigate risk.
• Document and maintain enterprise processes to reduce security risk and mature security controls.
• Perform routine or ad-hoc security risk assessments.
• Maintain the GRC platform to document controls and risk information.
• Produce periodic risk views/reports for executives.
• Prepare for and assist with audits.
• Evaluate impact of control deficiencies and drive actionable business impact.
• Respond to security questionnaire/audit report requests from RxBenefits Clients.
• Exercise judgment to influence business partners.
• Balance business strategy with risk controls.
• Stay up to date with audit and compliance trends.
• Manage 3rd party vendor assessment and compliance.
• Assist with development of policies, procedures, and standards.
• All other duties as assigned.

Skills

Audit & Compliance

HIPAA

Risk Management

Communication

Detail Oriented

Multi-tasking

Education

Bachelor’s degree

Tools

NIST/ISO/COBIT frameworks

Job description

RxBenefits, Inc. seeks a GRC Analyst to coordinate corporate compliance initiatives and work closely with security and compliance teams. You will translate risk into actionable controls across the enterprise and support audits.

The role requires strong program management, attention to detail, and the ability to multi-task across initiatives while influencing business partners and guiding change.