Sr. GRC Analyst
Core
Senior GRC Analyst ensuring compliance posture across security frameworks (ISO 27001, SOC 2, HITRUST, HIPAA) and managing internal/external audits for a healthcare data platform.
Role type
Senior GRC Analyst (Technical Compliance)
Builds
Compliance certifications, risk registers, and automated GRC controls
Domain
Healthcare technology / Information Security Compliance
Required skills
GRC/IT audit experience, control design, evidence collection, risk scoring, policy management, scripting/LLM automation, cloud-native environment knowledge
Preferred skills
HITRUST/SOC 2/ISO 27001 audit experience, CISA/CISM/CISSP/CRISC/ISO 27001 Lead Auditor certification
Technologies
AWS, Okta, Datadog, Retool, Gitlab, Vanta, Claude
Responsibilities
Manage and support compliance certifications (SOC 2, HITRUST, ISO 27001), serve as SME on compliance frameworks, act as primary contact for external auditors, maintain risk register, manage compliance policies, report compliance posture to leadership, scale GRC function with AI/automation
Seniority
Senior, hands-on IC
