Remote GRC & Compliance Analyst: Risk, Audit & Controls

RxBenefits, Inc.; Idaho Falls (ID); Remote; USD 81,000 - 101,000; Full time

Benefits offered by this job

Remote first work environment

HDHP or PPO Medical plan with premiums

Dental, Vision, Disability, Life Ins.

401(k) with employer match

Paid holidays and floating holidays

Internet reimbursement and equipment

Tuition Reimbursement

Paid New Parent Leave

Pet insurance

Mental health benefit and EAP

Job summary

RxBenefits, Inc. is seeking a GRC Analyst to coordinate and execute corporate compliance initiatives in collaboration with security and compliance teams. The role emphasizes strong program management, attention to detail, and the ability to multi-task across risk domains.

You will document controls, perform risk assessments, and support audits while maintaining the GRC platform. Candidates should have 3+ years in audit, risk, or compliance and experience with HIPAA controls and SSAE/SOC1/SOC2.

Qualifications

• 3+ years of Audit, Risk or Compliance experience
• 3+ years of experience with HIPAA regulatory controls, SSAE, SOC1 and SOC2
• Ability to juggle multiple work efforts and to quickly change direction
• Ability to work in a very detailed manner as well as to look broadly across a population and develop connections and themes identifying risk and concerns
• Sound organizational, analytical, oral, and written communication skills – Ability to successfully communicate to influence management and lead change in both strategic and tactical initiatives
• Self-starter, desire to learn, able to teach others, high energy, positive attitude, exhibits flexibility

Responsibilities

• Coordinate and execute corporate compliance initiatives with security and compliance teams
• Identify and maintain high-value assets and associated threats/vulnerabilities for risk mitigation
• Document and maintain enterprise security control processes
• Perform routine and ad-hoc security risk assessments
• Assist in maintaining the GRC platform to document controls and risk information
• Produce periodic risk reports for executives and stakeholders
• Assist with responses to internal and external audits
• Evaluate impact of control deficiencies and drive actionable business impact
• Respond to security questionnaire and audit report requests from RxBenefits clients
• Stay updated on audit and compliance trends
• Manage 3rd party vendor assessment and compliance
• Assist with development of policies, procedures, and standards
• All other duties as assigned

Skills

Audit experience

Risk assessment

HIPAA controls

SOC1/SOC2

Regulatory compliance

Analytical skills

Communication skills

Project management

Self-starter

Education

Bachelor’s degree or relevant equivalent experience

Job description

RxBenefits, Inc. is seeking a GRC Analyst to coordinate and execute corporate compliance initiatives in collaboration with security and compliance teams. The role emphasizes strong program management, attention to detail, and the ability to multi-task across risk domains.

You will document controls, perform risk assessments, and support audits while maintaining the GRC platform. Candidates should have 3+ years in audit, risk, or compliance and experience with HIPAA controls and SSAE/SOC1/SOC2.