Remote GRC Security Analyst—HIPAA & Compliance

Ladders; United States; Remote; USD 130,000 - 150,000; Full time

Benefits offered by this job

Collaborative culture

Growth opportunities

Hands-on security experience

Job summary

Ladders is seeking a GRC Security Analyst to strengthen governance, risk and compliance in a regulated healthcare environment. This remote role collaborates with security, compliance and operations to reduce risk and ensure readiness for audits and regulatory reviews.

The candidate should have 2–5 years in GRC or information security, knowledge of HIPAA Security Rule, and strong analytical and communication skills. You will map controls to frameworks and support regulatory initiatives.

Qualifications

• Bachelor's degree or equivalent in a relevant field.
• 2–5 years in GRC, information security, or related functions.
• Experience in risk assessments and compliance reviews.
• Background in regulated industries such as healthcare or finance.
• Knowledge of HIPAA Security Rule and related governance frameworks.
• Strong analytical and problem-solving skills.
• Excellent communication and organizational abilities.

Responsibilities

• Conduct security risk assessments and document findings.
• Support improvements to Governance, Risk, and Compliance programs.
• Maintain security policies and procedures.
• Coordinate audit activities, including evidence collection.
• Map security controls to relevant regulatory frameworks.
• Assist with compliance monitoring and regulatory readiness.
• Maintain risk registers and governance documentation.

Skills

GRC

Risk assessment

Information security

HIPAA knowledge

Regulatory compliance

Communication

Education

Bachelor's degree or equivalent

Job description

Ladders is seeking a GRC Security Analyst to strengthen governance, risk and compliance in a regulated healthcare environment. This remote role collaborates with security, compliance and operations to reduce risk and ensure readiness for audits and regulatory reviews.

The candidate should have 2–5 years in GRC or information security, knowledge of HIPAA Security Rule, and strong analytical and communication skills. You will map controls to frameworks and support regulatory initiatives.