Senior GRC Analyst — AI-Driven Compliance

Garner Health; New York (NY); Hybrid; USD 155,000 - 185,000; Full time

Benefits offered by this job

Flexible PTO

Medical/Dental/Vision plan options

401(k)

Teladoc Health and more

Job summary

Garner Health is seeking a Senior GRC Analyst to join our Technical Compliance team to ensure our security posture across ISO 27001, SOC 2, HITRUST, and HIPAA. You’ll run internal audits, guide external assessments, and partner with Engineering, Product, People, and Legal to design and operate effective controls.

Based in the U.S. (hybrid in New York City per schedule) or remote, you’ll help scale the GRC function, manage risk, and drive continuous improvement with AI-driven automation.

Qualifications

• 5+ years of experience in GRC, IT audit, or information security compliance.
• Hands-on experience with HITRUST, SOC 2, and ISO 27001 audits.
• Cloud-native engineering environments and control design experience.
• Proven ability to adapt communication across engineers, operators, and executives.
• Experience automating tasks with scripting or LLMs.
• Industry certifications such as CISA, CISM, CISSP, CRISC, or ISO 27001 Lead Auditor preferred.

Responsibilities

• Manage and support compliance certifications, including SOC 2, HITRUST, and ISO 27001 audits and run control testing across the audit lifecycle.
• Serve as the subject matter expert across the company on our compliance frameworks.
• Serve as the primary point of contact for external auditors and assessors.
• Manage Garner's Security and Privacy trust center.
• Maintain the risk register and drive risk identification, scoring, and reporting.
• Manage the maintenance of our compliance policies, standards, and procedures.
• Report on our compliance posture to senior leadership.
• Scale our GRC function with AI and automation, building quick wins and scoping requirements for Engineering to fully automate the rest.

Skills

GRC expertise

IT audit

Information security

Regulatory compliance

Scripting & automation

Executive communication

Tools

AWS

Okta

Datadog

Retool

Gitlab

Vanta

Claude

Job description

Garner Health is seeking a Senior GRC Analyst to join our Technical Compliance team to ensure our security posture across ISO 27001, SOC 2, HITRUST, and HIPAA. You’ll run internal audits, guide external assessments, and partner with Engineering, Product, People, and Legal to design and operate effective controls.

Based in the U.S. (hybrid in New York City per schedule) or remote, you’ll help scale the GRC function, manage risk, and drive continuous improvement with AI-driven automation.