[Hiring] GRC Analyst @RxBenefits, Inc.

Role Description

The GRC Analyst will coordinate and independently execute corporate compliance initiatives. This role will work closely with the security and compliance teams and play a key role in implementing and executing RxBenefits compliance vision. The ideal candidate will have strong program and project management skills and high attention to detail with the ability to multi-task.

• Work with RxBenefits teams to identify and maintain a list of high-value assets and their associated threats and vulnerabilities to ensure effective risk mitigation.
• Document and maintain processes across the enterprise to reduce security risk; work with partners across the organization to design and mature security controls to support the mitigation of risks.
• Perform routine or ad-hoc security risk assessments on various topics as needed or in response to management requests.
• Assist in maintaining the GRC platform to document controls, risk information, and other related details.
• Produce periodic views/reports of security risk to inform executives of the health of the program and of the company’s risk position.
• Prepare for and assist with responding to internal and external audits.
• Evaluate impact of all control deficiencies in an audit, expand and refine control deficiency documentation to drive actionable business impact.
• Work with RxBenefits Clients to respond to security questionnaire and/or audit report requests.
• Exercise judgment and critical thinking to influence business partners.
• Help business partners balance their business strategy with appropriate risk management controls.
• Stay up to date with latest audit and compliance trends.
• Manage 3rd party vendor assessment and compliance.
• Assist with development of policies, procedures, and standards.
• All other duties as assigned.

Qualifications

• Bachelor’s degree or relevant equivalent experience
• 3+ years of Audit, Risk or Compliance experience
• 3+ years of experience with HIPAA regulatory controls, SSAE, SOC1 and SOC2
• Ability to juggle multiple work efforts and to quickly change direction
• Ability to work in a very detailed manner as well as to look broadly across a population and develop connections and themes identifying risk and concerns
• Sound organizational, analytical, oral, and written communication skills – Ability to successfully communicate to influence management and lead change in both strategic and tactical initiatives
• Self-starter, desire to learn, able to teach others, high energy, positive attitude, exhibits flexibility

Requirements

• 5+ years of experience with IT general controls and other IT controls aligned with frameworks such as NIST, ISO, and COBIT
• Healthcare industry experience preferred
• Experience working with external audit firms preferred

Benefits

• Remote first work environment
• Choice of a HDHP or PPO Medical plan, we pay 100% of the premium for the HDHP for you and your eligible family members
• Dental, Vision, Short- and Long-Term Disability, and Group Life Insurance that we also pay 100% of premiums (for your family too on Dental and Vision)
• Additional buy-up options for Short- and Long-Term Disability and Life Insurance
• 401(k) with an employer match up to 3.5% available after 60 days
• Community Service Day to give back and support what you love in your community
• 10 company holidays including MLK Day, Juneteenth, and the day after Thanksgiving plus a floating holiday to use as you like
• Reimbursements for high-speed internet, we’ll send you a computer and monitors to help you do your best work
• Tuition Reimbursement for accredited degree programs
• Paid New Parent Leave that can be used for adoption or birth
• Pet insurance to protect your furbabies
• A robust mental health benefit and EAP service through Spring Health to support you when you need it most