Sr. GRC Analyst - Internal Governance
Garner Health is seeking a Senior Governance, Risk, and Compliance (GRC) Analyst to join their Technical Compliance team. This role is integral to maintaining and enhancing the company's security program, ensuring compliance with various frameworks such as ISO 27001, SOC 2, HITRUST, and HIPAA. The position is open to remote candidates across the United States, with a hybrid schedule for those based in New York City.
In this role, the Senior GRC Analyst will be responsible for managing the annual information security risk assessment and risk register, overseeing third-party and vendor risk reviews, and addressing security findings from various assessments. Additionally, the analyst will lead security and compliance training programs, maintain compliance policies, and report on the company's compliance posture to senior leadership. A key aspect of the role involves scaling the GRC function through the use of AI and automation.
Candidates should have over five years of experience in GRC, IT risk management, third-party risk management, or information security compliance. Experience with information security risk assessments, vendor risk management, and vulnerability remediation in cloud-native environments is essential. A strong understanding of HIPAA, SOC 2, ISO 27001, and HITRUST requirements is required. The ideal candidate will possess a GRC engineering mindset, with experience in scripting and using large language models (LLMs) to automate tasks. Industry certifications such as CISA, CISM, CISSP, CRISC, or ISO 27001 Lead Auditor are preferred.
The compensation for this role ranges from $155,000 to $185,000 annually. In addition to base salary, the position offers equity incentives and a comprehensive benefits package, including flexible paid time off (PTO), medical, dental, and vision plans, a 401(k) plan with company match, flexible spending accounts, and access to Teladoc Health services.
Garner Health is committed to transforming the U.S. healthcare system by partnering with employers to redesign healthcare delivery. The company applies proprietary clinical metrics across various specialties to identify top-performing doctors and uses incentives to guide members toward effective care. Joining Garner Health offers the opportunity to be part of a mission-driven team dedicated to improving healthcare outcomes and reducing costs.