Senior GRC Analyst - Remote | AI-Driven Compliance

Garner Health; United States; A distancia; USD 155.000 - 185.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Equity incentive

Flexible PTO

Medical/Dental/Vision plan

401(k)

Descripción de la vacante

Garner Health is seeking a Senior GRC Analyst to join our Technical Compliance team to ensure our security controls meet ISO 27001, SOC 2, HITRUST, and HIPAA requirements. You will lead internal audits, guide external assessments, and collaborate with Engineering, Product, People, and Legal to keep controls effective and scalable.

The role is remote across the U.S. with inherited hybrid options for NYC-based candidates.

Formación

• 5+ years of experience in GRC, IT audit, or information security compliance.
• Experience with HITRUST, SOC 2, and ISO 27001 audits.
• Hands-on control design, evidence collection, and remediation in a cloud-native environment.
• Proven ability to adapt communication across engineers, operators, and executives.
• GRC engineering mindset with scripting and LLMs to automate repetitive tasks.
• Industry certifications such as CISA, CISM, CISSP, CRISC, or ISO 27001 Lead Auditor preferred.

Responsabilidades

• Manage and support compliance certifications, including SOC 2, HITRUST, and ISO 27001 audits and run control testing across the audit lifecycle
• Serve as the subject matter expert across the company on our compliance frameworks
• Serve as the primary point of contact for external auditors and assessors
• Manage Garner’s Security and Privacy trust center
• Maintain the risk register and drive risk identification, scoring, and reporting
• Maintain the maintenance of our compliance policies, standards, and procedures
• Report on our compliance posture to senior leadership
• Scale our GRC function with AI and automation, building quick wins and scoping requirements for Engineering to fully automate the rest

Conocimientos

GRC

IT audit

Information security

Educación

Certifications: CISA, CISM, CISSP, CRISC, ISO 27001 Lead Auditor

Herramientas

Scripting

LLMs

Descripción del empleo

Garner Health is seeking a Senior GRC Analyst to join our Technical Compliance team to ensure our security controls meet ISO 27001, SOC 2, HITRUST, and HIPAA requirements. You will lead internal audits, guide external assessments, and collaborate with Engineering, Product, People, and Legal to keep controls effective and scalable.

The role is remote across the U.S. with inherited hybrid options for NYC-based candidates.