Senior GRC Analyst (Fully Remote)

Garner Health; United States; Hybrid; USD 155,000 - 185,000; Full time

Benefits offered by this job

Equity

Flexible PTO

Medical/Dental/Vision

401(k)

Job summary

Garner Health seeks a senior GRC/security compliance leader to manage audits (SOC 2, HITRUST, ISO 27001) and control testing, while owning the risk register, trust center, policies, and reporting. You will partner with Engineering to drive automation and operational improvements.

The role requires 5+ years in GRC/IT audit, with strong scripting, LLM, and cross-functional communication skills across engineers, operators, and executives.

Qualifications

• 5+ years in GRC, IT audit, or security compliance.
• Experience with HITRUST, SOC 2, and ISO 27001.
• Strong scripting, LLM, and communication with engineers, operators, and executives.

Responsibilities

• Manage SOC 2, HITRUST, and ISO 27001 audits and control testing.
• Own risk register, trust center, policies, and reporting; partner with Engineering on automation.

Skills

SOC 2 audits

HITRUST & ISO27001

Scripting

LLM & communications

Job description

• Manage SOC 2, HITRUST, and ISO 27001 audits and control testing.
• Own risk register, trust center, policies, and reporting; partner with Engineering on automation.

Requirements:

• 5+ years in GRC, IT audit, or security compliance with HITRUST, SOC 2, and ISO 27001.
• Scripting, LLM, and communication skills for engineers, operators, and executives.
• $155,000-$185,000 salary plus equity, flexible PTO, Medical/Dental/Vision, 401(k).
• Remote U.S.; hybrid NYC for local candidates.

Garner Health

Garner Health uses clinical data and incentives to steer members toward higher-quality, lower-cost care in partnership with employers. We've doubled five years running, raised a Series E, and maintain a mission-driven, high-accountability culture.