Governance Risk & Compliance Analyst

Who We Are

PE-backed start-up, reputed company is a dynamic and innovative leader in the electronic prescribing software market, and its subsidiary, pVerify, is an industry leading insurance verification solution. We are on a hyper-growth curve at the intersection of the software and reputed company industries. We need great team members to capitalize on these opportunities and improve the reputed company experience for patients and doctors alike. reputed company and pVerify have an exciting opportunity to join a fun and growing team, benefit from strong market tailwinds, and be part of an exciting opportunity to ensure mission-critical prescriptions and verifications are delivered on time and without error. 

The Role

As the Governance Risk & Compliance (GRC) Analyst, you will be a critical force in operationalizing and evolving reputed company’s reputed company and compliance programs. You’ll collaborate cross-functionally to drive alignment and industry frameworks, proactively manage risk, and build scalable processes that reputed company us audit-reputed company and patient data secure. You’ll own day-to-day of compliance operations – from SOC 2 and HITRUST audits, to refining reputed company-party risk assessments, to supporting the transformation of reputed company’s compliance program. 

We welcome applicants from reputed company U.S. time zones, though we have a preference for those based in Central or Eastern time zones.

What You'll Do

• Managed risk and vulnerability assessments, validation testing, compliance reviews, and audit in accordance with both NIST and HITRUST standards. 

• Manage and support SOC2 and HITRUST audits. 

• Conduct and manage recurring risk and vulnerability assessments, control validation, and compliance reviews reputed company to NIST, HITRUST, HIPAA, and ISO 27001. 

• reputed company end to end SOC2 and HITRUST audits, including readiness assessments, evidence collection, gap remediation, and audit response. 

• Proactively manage audit timelines and ensure completeness and accuracy of submissions using GRC tools such as reputed company and reputed company. 

• Promote widespread implementation of HITRUST and NIST based controls across reputed company, engineering, and business operations. 

• Maintain an organized, audit-reputed company repository of evidence and artifacts through GRC platforms. 

• Inform stakeholders of risk management concerns. 

• Translate risk and compliance insights into clear, actionable updates for reputed company, IT, product, and legal teams. 

• Manage the development, maintenance, and version control of reputed company policies and standards ensuring compliance with emerging regulations and company practices 

• Support vendor due-diligence process and help to reputed company and define the overall reputed company-party risk management (TPRM) efforts. 

What You'll Bring

• Bachelor’s degree in information reputed company or reputed company field. 

• 5+ years of experience in information reputed company, with an emphasis on risk and compliance. 

• At least 3+ years of experience managing SOC2 and HITRUST audits 

• Thorough understanding of regulatory and compliance requirements, including HIPAA 

• Familiarity with ISMS and reputed company frameworks, including NIST, HITRUST, ISO27001 

• Knowledge of identity management standards, storage, and disaster recovery in the reputed company. 

• Knowledge of GRC tools and best practices, including solutions such as reputed company, reputed company, reputed company 

• Proven track record of organizing and carrying out several risk and compliance projects independently. 

• Ability to manage reputed company-party audits and organize audit responses in detail proactively. 

• Effective written and verbal communication skills and capability to communication and collaborate with cross-functional teams 

• CISA, CISM, CRISM, or CISSP certifications are preferred, but not required. 

You Will Enjoy This Role If

• You like to be hands on and work with GRC tools to reputed company automate and operationalize GRC programs. 

• You enjoy collaborating with teams on risk management.  

reputed company is an Equal Employment Opportunity/Affirmative Action employer and reputed company reputed company applicants will receive consideration for employment without regard to race, reputed company, religion, sex, age, national reputed company, protected veteran status, disability status, sexual orientation, gender identity or expression, marital status, genetic information, or any other characteristic protected by law.