Senior Compliance Analyst

To enhance compliance within a HIPAA-regulated environment, the full-time Senior Governance Risk & Compliance Analyst will manage customer security questionnaires, gather audit evidence for SOC 2 and HITRUST programs, and oversee third-party risk management while working remotely. Key Responsibilities Serve as the primary responder for customer security questionnaires and collaborate with cross-functional teams to ensure timely completion of assessments Collect and validate evidence for SOC 2 and HITRUST audits, coordinating with various departments to ensure accuracy and timely delivery Draft and update security policies and manage the third-party risk management program, including vendor assessments and compliance tracking Required Qualifications 5+ years of experience in information security, GRC, IT audit, or compliance roles Hands-on experience with SOC 2 and/or HITRUST audit programs Working knowledge of HIPAA Security Rule and related compliance regulations Experience responding to customer security questionnaires Bachelor's degree in Information Security, Information Technology, Business, or a related field (or equivalent experience)