Remote InfoSec GRC Analyst: HITRUST & SOC2

Paycom; Atlanta, Northern (GA, KY); Hybrid; USD 60,000 - 90,000; Full time

Benefits offered by this job

Medical, vision, dental benefits

Paid time off

401k

Job summary

ExamWorks is seeking an experienced GRC Analyst to join our team. This role is 100% remote and can be located anywhere in the United States, with a typical Monday–Friday schedule.

You will assess, implement, manage, and document security controls aligned to our information security strategy and compliance needs, including HITRUST and SOC2 audits. Strong communication and policy development skills are essential.

Qualifications

• College degree in computer science or related field.
• 5 years in IT security, risk management, compliance, and audit.
• Experience with compliance frameworks such as SOX, PCI, SOC, NIST, ISO 27001, HITRUST, HIPAA and HITECH.
• Ability to articulate IT security policies, processes, and technical controls.
• Excellent written and verbal communication skills.

Responsibilities

• Assess, implement, manage, and document security controls in support of information security strategy and compliance requirements.
• Advocate an effective security program with risk assessment, testing, and policy development.
• Facilitate HITRUST, SOC2 audit engagement, data collection, remediation and monitoring.
• Respond to client assessments, RFPs, and conduct vendor risk assessments.
• Lead cross-training sessions with IT Security on tools and technical controls.

Skills

IT security

Risk management

Compliance frameworks

Audit coordination

Policy articulation

Education

College Degree in Computer Science or related field

Job description

ExamWorks is seeking an experienced GRC Analyst to join our team. This role is 100% remote and can be located anywhere in the United States, with a typical Monday–Friday schedule.

You will assess, implement, manage, and document security controls aligned to our information security strategy and compliance needs, including HITRUST and SOC2 audits. Strong communication and policy development skills are essential.