Remote GRC & Compliance Analyst — Risk, Audit & Controls

RxBenefits, Inc.; Yuma (AZ); Remote; USD 81,000 - 101,000; Full time

Benefits offered by this job

Remote first

HDHP or PPO medical plan (premium paid

Dental, Vision, Disability & Life – 百

401(k) with employer match

Paid holidays

Internet reimbursement

Tuition reimbursement

Paid parental leave

Pet insurance

Mental health benefit

Job summary

RxBenefits, Inc. seeks a GRC Analyst to coordinate corporate compliance initiatives and collaborate with security and compliance teams to implement the company's compliance vision.

The role requires 3+ years in audit/risk/compliance, HIPAA controls, SSAE, SOC1/SOC2, and strong communication and organizational skills to support audits, risk assessments, policy development, and third‑party assessments.

Qualifications

• Bachelor’s degree or relevant equivalent experience.
• 3+ years of Audit, Risk or Compliance experience.
• 3+ years of experience with HIPAA regulatory controls, SSAE, SOC1 and SOC2.
• Ability to juggle multiple work efforts and to quickly change direction.
• Ability to work in a very detailed manner and identify risk across a population.

Responsibilities

• Coordinate and execute compliance initiatives with security and compliance teams.
• Maintain processes to reduce security risk and design controls across the enterprise.
• Perform routine or ad-hoc security risk assessments.
• Maintain the GRC platform to document controls and risk information.
• Produce risk reports for executives.
• Prepare for audits and respond to audit requests.
• Evaluate deficiencies and drive actionable business impact.
• Interact with RxBenefits Clients to respond to security questionnaires/audits.
• Balance business strategy with risk controls.
• Stay updated on audit and compliance trends.
• Manage third-party vendor assessments.

Skills

Audit/Risk/Compliance

HIPAA controls

SOC1/SOC2

Multitasking

Detail-oriented

Education

Bachelor’s degree or relevant equivalent

Job description

RxBenefits, Inc. seeks a GRC Analyst to coordinate corporate compliance initiatives and collaborate with security and compliance teams to implement the company's compliance vision.

The role requires 3+ years in audit/risk/compliance, HIPAA controls, SSAE, SOC1/SOC2, and strong communication and organizational skills to support audits, risk assessments, policy development, and third‑party assessments.