Senior GRC Analyst: Security Risk & Compliance Lead

Garner Health, LLC; United States; Remoto; USD 155.000 - 185.000; Tempo pieno

Vantaggi offerti da questo lavoro

Equity incentives

Flexible PTO

401(k) with company match

Medical/Dental/Vision plan

Descrizione del lavoro

Garner Health, LLC is seeking a Senior GRC Analyst to join our Technical Compliance team. You will own the recurring risk, vendor, findings, and governance work that keeps Garner’s security program operating between audits, manage risk registers, and drive remediation across departments.

You will lead security training, maintain policies, and report to senior leadership. This remote role supports candidates nationwide with a hybrid option for NYC-based staff.

Competenze

• 5+ years of experience in GRC, IT risk management, third party risk management, or information security compliance.
• Experience running information security risk assessments and maintaining a risk register using methodologies such as NIST CSF or ISO 27005.
• Hands-on experience with vendor risk management and remediation programs in a cloud-native environment.
• Working knowledge of HIPAA and SOC 2, ISO 27001, and HITRUST requirements.

Mansioni

• Own Garner’s annual information security risk assessment and risk register, driving risk identification, scoring, treatment, and reporting.
• Manage risk exceptions and prepare risk acceptances for leadership decision.
• Run third party and vendor risk reviews from intake through approval and periodic reassessment.
• Own security findings from vulnerability scanning, penetration tests, audits, client assessments, and incidents, tracking remediation with Engineering, enforcing SLAs, and escalating findings that warrant a risk decision.
• Run our security and compliance training program, including annual security awareness and HIPAA training, onboarding, content refreshes, and completion tracking.
• Manage the maintenance of our compliance policies, standards, and procedures.
• Report on our compliance posture to senior leadership.
• Scale our GRC function with AI and automation, building quick wins and scoping requirements for Engineering to fully automate the rest.

Conoscenze

GRC experience

IT risk management

Vendor risk management

HIPAA knowledge

SOC 2 knowledge

ISO 27001 knowledge

HITRUST knowledge

LLM automation

Descrizione del lavoro

Garner Health, LLC is seeking a Senior GRC Analyst to join our Technical Compliance team. You will own the recurring risk, vendor, findings, and governance work that keeps Garner’s security program operating between audits, manage risk registers, and drive remediation across departments.

You will lead security training, maintain policies, and report to senior leadership. This remote role supports candidates nationwide with a hybrid option for NYC-based staff.