Governance, Risk, & Compliance (GRC) Analyst

Responsibilities: Conduct security assessments and gap analyses against compliance frameworksDevelop and maintain security policies, procedures, and documentationSupport clients through SOC 2, HIPAA, and other compliance auditsPerform risk assessments and develop risk treatment plansCreate and deliver compliance reports and executive summariesAssist with vendor security questionnaire responsesStay current on regulatory changes and industry best practicesCollaborate with technical teams to implement security controls Qualifications

• 2+ years of experience in GRC, compliance, or information security
• Strong knowledge of compliance frameworks (SOC 2, HIPAA, NIST CSF, ISO 27001)
• Experience conducting security assessments and audits
• Excellent documentation and technical writing skills
• Strong understanding of security controls and risk management principles
• Ability to communicate complex concepts to non-technical stakeholders
• Detail-oriented with strong organizational skills
• Bachelor's degree in Cybersecurity, Information Systems, or related field Preferred Qualifications + GRC certifications (CISA, CRISC, CGRC, or equivalent) + Experience with GRC platforms (ServiceNow, OneTrust, ControlMap) + Healthcare or financial services industry experience + Knowledge of cloud compliance (FedRAMP, SOC 2 for SaaS) + Experience with privacy regulations (GDPR, CCPA) What We Offer ★ Fully remote work environment ★ Competitive salary and performance bonuses ★ Health, dental, and vision insurance ★ Professional development and certification support ★ Mentorship from industry-leading security experts