Risk and Compliance Associate

Risk And Compliance Associate

At Ready Computing, we specialize in data-centric IT solutions that help organizations across healthcare, supply chain, finance, and manufacturing optimize their technology and data strategies. With offices in the U.S. and the UK, we provide expert consulting, development, and managed services to clients worldwide. We're committed to hiring top talent to drive innovation, particularly in the healthcare IT space.

As part of our commitment, we are seeking a highly organized, detail-oriented, and process-driven Risk and Compliance Associate to join our centralized Compliance and Risk Management team. Ready Computing operates a mature, certified Integrated Management System (IMS) spanning ISO 9001:2015, ISO/IEC 20000-1:2018, ISO/IEC 27001:2022, HITRUST CSF r2, as well as several other major standards and frameworks.

As a Virtual-First enterprise, our compliance operations are cloud-native and deeply integrated into our technical and business lifecycles. The successful candidate will serve as the administrative engine of our daily compliance workflows. This role requires a unique blend of exceptional administrative rigor, advanced document control skills, clear communication, and a systematic, logical approach to process execution, providing critical operational and administrative support across our core Compliance programs. Your contributions will directly support our leadership team, ensuring our systems of record remain accurate, auditable, and resilient.

The Risk and Compliance Associate is responsible for the day-to-day administrative execution and record-keeping across our core program areas. The role acts as a collaborative, supportive partner enabling the compliance success of all internal business units.

Integrated Document and Knowledge Lifecycle

This is a primary operational focus requiring advanced-level mastery of document styling, structure, and lifecycle tracking per Company policies and our internal IMS Documentation Writing Standard:

• Advanced Templating and Re-Templating: Standardize, format, and convert legacy documentation and templates utilizing Microsoft Word with meticulous precision.
• Documentation Triage and Initial Revision: Monitor incoming documentation requests. Perform initial intake, analyze request details, and execute first-pass document drafts incorporating specific request parameters. Actively follow up with requesters to clarify ambiguous instructions.
• Inconsistency and Gap Identification: Review draft policies, plans, and procedures to identify logical gaps, mutual exclusivities, legacy or obsolete parameters, and misalignments between external compliance matrices and internal documentation.
• Process Integrity Tracking: Map and verify the end-to-end integrity of procedures from the core business purpose, required inputs, step-by-step technical execution, to the final expected output and evidence generation. DCML and Repository Synchronization: Maintain the authoritative Document Control Master List with absolute accuracy. Enforce strict File Naming Conventions (FNC) and version control standards across all shared drives and directories.
• Cycle and Queue Reporting: Manage the annual revision cycles by proactively alerting document owners of upcoming review deadlines. Run-down and report on active documents in the queue to maintain administrative momentum. Post-Implementation Review Facilitation: Schedule and participate in post-implementation team meetings following major document releases to review, document, and learn from what changed and why.

Internal and External Service Requests

Manage the incoming queue of security, compliance, and regulatory requests from both internal departments and external clients:

• Triage and Assignment: Provide immediate intake, triage, and prioritization of incoming requests. Write clear, actionable notes and context to assist technical SMEs prior to ticket routing.
• Initial Questionnaire Drafting: Coordinate external client security and compliance questionnaires. Execute initial first-pass drafting of answers utilizing the GRC platform and standard answer libraries, completing responses as far as possible before escalating to secondary specialists.
• Queue Visibility Reporting: Generate and maintain active reports on support tickets and questionnaires in queue to ensure complete visibility and strict SLA compliance.

Non-Conformance and Corrective Actions

Support the closed-loop tracking of compliance "misses" or process deviations per Company policies:

• NCAR Logging and Tracking: Maintain the central NCAR and Actions Log with meticulous accuracy. Log new non-conformances identified during internal audits, quality assurance reviews, or client feedback.
• Form Facilitation: Initiate and coordinate the completion of formal NCAR Forms (QMS FORM-0014) with process owners.
• Remediation Follow-Up: Proactively track the status of approved Corrective Action Plans (CAPs) and follow up with owners across all levels of the organization to guarantee timely closure of action items.

Performance Monitoring, Measurement, and MRMs

Support data-driven compliance reviews and reporting:

• KPI Data Collection: Coordinate with Key Performance Indicator (KPI) and metric owners across the business on a monthly and quarterly basis to gather performance data.
• Metric Consolidation: Port and aggregate raw data into our centralized GRC systems and performance reports, conducting initial validation checks to ensure data completeness and integrity.
• Management Review Inputs: Formally coordinate administrative logistics for quarterly Management Review Meetings (MRMs). Prepare and draft 2 to 3 specific slides within the MRM presentation deckfocusing specifically on KPIs, training metrics, and program-level data within your direct purview. Log and track post-MRM action items.

Governance, Risk, and Privacy Program Operations

Execute routine administrative support to ensure the integrity of our core governance programs:

• Annual Attestation Campaigns: Administer the intake and tracking of annual workforce Conflict of Interest (COI) disclosures and annual Remote Worksite Evaluation Checklists, performing completeness reviews.
• Data Subject Requests (DSRs): Support the day-to-day management of the DSR queue. Maintain the secure GDPR Data Subject Request Log and monitor fulfillments against strict statutory SLAs.
• Vendor Risk Support: Facilitate the administrative onboarding of third-party vendors. Send questionnaires, track responses, perform initial completeness reviews, and update the Vendor Risk Register and Performance Logs.
• Internal Auditing Execution: Coordinate audit schedules, prepare interview checklists, take meeting minutes, and log approved audit findings.

What You Bring

Education and Qualifications

• Education: Bachelor's degree or equivalent practical experience.
• Experience: 1-3 years of experience in a role requiring a high degree of organization and administrative controlsuch as GRC coordination, IT project coordination, legal assistant/paralegal, document control specialist, or quality assurance.
• Remote-First Success: Demonstrated ability to work independently, maintain high productivity, and communicate proactively in a fully remote, Virtual-First environment.

Preferred Experience

• Direct experience working within a security, compliance, legal, or IT auditing team.
• Familiarity with compliance standards and frameworks (e.g., ISO 9001, ISO 27001, ISO 20000-1, HITRUST CSF, HIPAA, NIST, GDPR).
• Experience using GRC platforms (e.g., Thoropass) or ticketing engines (e.g., Jira, Confluence).

Core Competencies

• Advanced Mastery of Microsoft Word and Google Workspace: Proven, elite-level ability to design, style, template, and review complex documents using advanced formatting features (e.g., style sheets, headers/footers, section breaks, tracking changes).
• Meticulous Precision and Detail: A natural habit of checking every word, acronym, and cross-reference to ensure records and data are maintained flawlessly.
• Process-Oriented Thinking: An innate ability to understand, follow, and execute structured, multi-step procedures and track evidence end-to-end.
• Deadlines and Schedule Execution: Exceptional time management; able to manage multiple GRC queues and proactively follow up with busy executives to meet compliance schedules.
• Integrity and Discretion: Complete confidentiality and professionalism when handling sensitive HR, legal, financial, and regulatory records.
• Research and Analysis: Conducts independent data mining, research, and analysis on key Risk and Compliance topics

Physical and Mental Qualifications

This is a fully remote position operating from a home office or other approved remote location. The physical and mental demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform these functions.

• This role requires the ability to