GRC Analyst
New
C
CerestiHealthcare technology
Location: United StatesFull-TimeJunior
SalaryCompetitive base salary with final offer based on experience, skills, and location
Apply NowOpens the employer's application page
Job Details
- Experience
- One to three years of experience in governance, risk and compliance, audit, or a related field.
- Required Skills
- HIPAA
Requirements
- Have one to three years of experience in governance, risk and compliance, audit, or a related field.
- Have working knowledge of at least one of SOC 2, HITRUST, or HIPAA, with willingness to learn the others.
- Write clearly and precisely.
- Pay close attention to detail and track multiple small items through completion.
- Follow up with colleagues to gather evidence.
- Preferred: exposure to a GRC or compliance-automation platform.
- Preferred: experience in healthcare or another regulated industry.
- Preferred: familiarity with vendor risk assessments or BAA tracking.
- Preferred: external audit exposure.
Responsibilities
- Collect evidence for SOC 2 Type 2 and HITRUST, including internal audit testing of controls.
- Track control evidence status and keep the CISO informed.
- Coordinate with Security, IT, and Engineering control owners to gather audit artifacts.
- Update security and privacy policies, manage versions, and track acknowledgments.
- Maintain documented proof that policies are being followed across the company.
- Run third-party vendor risk assessments, document findings, and escalate issues requiring a decision.
- Support HIPAA and other healthcare compliance obligations alongside the CISO.
- Support the data retention, de-identification, and disposal program.
View Full Description & ApplyYou'll be redirected to the employer's site
