Senior GRC & Security Risk Strategist (Remote)

garnerhealth; United States; Remoto; USD 155.000 - 185.000; Tempo integral

Benefícios oferecidos por esta vaga

Flexible PTO

Medical/Dental/Vision

401(k) with company match

Flexible spending accounts

Teladoc Health

Resumo da vaga

Garner Health is hiring a Senior GRC Analyst to own risk governance, third-party risk and security findings. You’ll drive risk assessment, manage risk acceptances, and coordinate remediation with Engineering in a fast-paced, mission-driven environment.

The role emphasizes HIPAA/compliance training and a strong control framework across the organization. Remote-friendly across the United States, with occasional coordination for audits and leadership reviews.

Qualificações

• 5+ years of experience in GRC, IT risk management, third party risk management, or information security compliance.

Responsabilidades

• Own Garner's annual information security risk assessment and risk register, driving risk identification, scoring, treatment, and reporting.
• Manage risk exceptions and prepare risk acceptances for leadership decision.
• Run third party and vendor risk reviews from intake through approval and periodic reassessment.
• Own security findings from vulnerability scanning, penetration tests, audits, client assessments, and incidents, tracking remediation with Engineering, enforcing SLAs, and escalating findings that warrant a risk decision.
• Run our security and compliance training program, including annual security awareness and HIPAA training, onboarding, content refreshes, and completion tracking.
• Manage the maintenance of our compliance policies, standards, and procedures.
• Report on our compliance posture to senior leadership.
• Scale our GRC function with AI and automation, building quick wins and scoping requirements for Engineering to fully automate the rest.

Conhecimentos

GRC

IT risk management

Vendor risk management

Info security

SOC 2 knowledge

ISO27001 knowledge

HIPAA knowledge

Communication across teams

Scripting

LLM automation

Formação

Bachelor’s degree or equivalent

Ferramentas

AWS

Okta

Wiz

Retool

GitLab

Vanta

Claude

Descrição da vaga

Garner Health is hiring a Senior GRC Analyst to own risk governance, third-party risk and security findings. You’ll drive risk assessment, manage risk acceptances, and coordinate remediation with Engineering in a fast-paced, mission-driven environment.

The role emphasizes HIPAA/compliance training and a strong control framework across the organization. Remote-friendly across the United States, with occasional coordination for audits and leadership reviews.