Remote GRC & Compliance Analyst (HIPAA/SOC2)

RxBenefits, Inc.; Sacramento (CA); Remote; USD 81,000 - 101,000; Full time

Benefits offered by this job

Remote first

401(k) match

Tuition reimbursement

Paid new parent leave

Pet insurance

Mental health benefits

Job summary

RxBenefits, Inc. is seeking a GRC Analyst to coordinate and independently execute corporate compliance initiatives.

This role will work closely with the security and compliance teams and play a key role in implementing and executing RxBenefits compliance vision. The ideal candidate will have strong program and project management skills with high attention to detail and the ability to multi-task across controls, HIPAA, SSAE, SOC1 and SOC2.

Qualifications

• Bachelor’s degree or relevant equivalent experience.
• 3+ years of Audit, Risk or Compliance experience.
• Experience with HIPAA, SSAE, SOC1 and SOC2.
• Strong attention to detail and organizational skills.
• Effective written and verbal communication to influence management.
• Self-starting, proactive learner with flexibility.

Responsibilities

• Identify and maintain high-value assets and their threats to support risk mitigation.
• Document enterprise processes to reduce security risk and mature controls across the organization.
• Conduct routine or ad-hoc security risk assessments as needed.
• Assist in maintaining the GRC platform documenting controls and risk information.
• Produce reports on security risk for executives and the company’s risk position.
• Assist with audits and audit responses.
• Evaluate impact of control deficiencies and drive business impact.
• Engage with RxBenefits Clients for security questionnaire/audit requests.
• Balance business strategy with risk management controls.
• Stay up to date with audit and compliance trends.
• Manage 3rd party vendor assessments and compliance.
• Assist in developing policies, procedures, and standards.
• All other duties as assigned.

Skills

Audit experience

Risk experience

Compliance experience

HIPAA controls

SSAE SOC1 SOC2

Multitasking

Attention to detail

Communication skills

Self-starter

Education

Bachelor's degree or relevant equivalent experience

Job description

RxBenefits, Inc. is seeking a GRC Analyst to coordinate and independently execute corporate compliance initiatives.

This role will work closely with the security and compliance teams and play a key role in implementing and executing RxBenefits compliance vision. The ideal candidate will have strong program and project management skills with high attention to detail and the ability to multi-task across controls, HIPAA, SSAE, SOC1 and SOC2.