Remote GRC Analyst

Supporting governance and compliance initiatives, the full-time Remote GRC Analyst will manage audit evidence for SOC 2, HITRUST, and HIPAA requirements, coordinate with internal teams, and track compliance activities from a remote location. Key responsibilities Gather and maintain audit evidence for compliance requirements, ensuring adherence to security standards Coordinate with internal teams to validate controls and document compliance activities and remediation efforts Conduct third-party/vendor risk assessments and assist with internal control testing and external audit preparation Required qualifications 1-3 years of experience in governance, risk, and compliance (GRC), audit, or information security Working knowledge of compliance frameworks such as SOC 2, HITRUST, or HIPAA Experience within healthcare or a regulated industry is preferred Familiarity with vendor risk assessments and external audits is a plus Exposure to GRC or compliance automation platforms is advantageous