Sr. GRC Analyst - Internal Governance
Core
Senior GRC Analyst owning recurring risk, vendor, findings, and governance work to keep the security program operating between audits.
Role type
Senior IC GRC Analyst (Internal Governance)
Builds
Security governance program, risk registers, vendor risk reviews, and compliance posture reporting.
Domain
Healthcare technology / Information Security Compliance
Required skills
GRC, IT risk management, third party risk management, information security compliance, risk assessment methodologies (NIST CSF, ISO 27005), vendor risk management, vulnerability remediation, HIPAA, SOC 2, ISO 27001, HITRUST, cross-functional accountability, automation with scripting/LLMs
Preferred skills
CISA, CISM, CISSP, CRISC, ISO 27001 Lead Auditor
Technologies
AWS, Okta, Wiz, Retool, Gitlab, Vanta, Claude
Responsibilities
Own annual information security risk assessment and risk register; manage risk exceptions and prepare acceptances for leadership; run third party and vendor risk reviews; own security findings from scans/audits/incidents and track remediation; run security and compliance training programs; maintain compliance policies, standards, and procedures; report on compliance posture to senior leadership; scale GRC function with AI and automation.
Seniority
Senior, hands-on IC
