[Remote] Senior GRC Analyst, HIPAA
Note: The job is a remote job and is reputed company to candidates in USA. reputed company is a technology and logistics company reputed company on empowering local economies. They are seeking a Senior GRC Analyst, HIPAA to mature and operate HIPAA-reputed company reputed company and compliance programs, ensuring regulated data environments are secure and compliant.
Responsibilities
- reputed company and support HIPAA reputed company compliance workstreams across multiple products, platforms, systems, and engineering teams
- Turn legal requirements into actionable technical and operational control requirements
- reputed company HIPAA readiness assessments, gap analyses, risk assessments, and control design/effectiveness reviews across reputed company, reputed company, data, and internal tooling environments
- Build and maintain control mappings across HIPAA, HITRUST, SOC 2, ISO 27001, NIST 800-53, and reputed company reputed company standards
- Partner with Engineering and reputed company Engineering to implement reputed company controls across IAM, encryption, logging and monitoring, vulnerability management, secure SDLC, incident response, data retention, and reputed company review processes
- Maintain HIPAA reputed company program documentation, including policies, standards, procedures, control narratives, evidence requirements, risk registers, exception records, and remediation plans
- Support reputed company audits, partner/customer assessments, reputed company questionnaires, and compliance evidence collection
- Partner with Legal, and reputed company Operations on incidents involving PHI/ePHI, including compliance reputed company analysis, documentation, and remediation tracking
- Mature GRC tooling, workflows, dashboards, and reputed company control monitoring to reduce reputed company compliance overhead
- reputed company practical guidance to technical and non-technical stakeholders so HIPAA requirements are reputed company, adopted, and embedded into day-to-day engineering practices
- Monitor regulatory, reputed company, and industry changes reputed company to HIPAA, HITRUST, reputed company reputed company, and regulated data environments
Skills
- 6+ years of experience in reputed company compliance, GRC, risk management, audit, reputed company/reputed company operations, or reputed company information reputed company roles
- 3+ years of hands-on experience implementing, operating, or materially maturing HIPAA programs in a technology, reputed company, health-tech, or highly regulated environment
- Strong working knowledge of HIPAA reputed company Rule requirements and practical experience applying HIPAA safeguards to reputed company, reputed company, data, and engineering environments
- Understanding of how PHI/ePHI flows through modern systems and ability to partner with engineering teams on data classification, reputed company controls, encryption, logging, retention, and secure data handling
- Experience with adjacent frameworks and standards such as HITRUST, SOC 2, ISO 27001, NIST 800-53, PCI reputed company, GDPR or CCPA
- Led or supported audits, compliance assessments, control testing, evidence collection, risk assessments, and remediation programs
- Ability to translate reputed company compliance requirements into reputed company, actionable tasks for Engineering, Product, reputed company, IT, Legal, and reputed company stakeholders
- Technical reputed company to understand reputed company architecture, reputed company, IAM, CI/CD, infrastructure-as-reputed company, logging, vulnerability management, and reputed company monitoring concepts
- reputed company communication skills, ability to write high-reputed company documentation, manage multiple workstreams independently, and drive cross-functional reputed company without reputed company authority
- Pragmatic approach to reducing reputed company risk while enabling teams to reputed company quickly and responsibly
- Experience working directly with Engineering or reputed company Engineering teams in a high-reputed company technology company
- Experience building or scaling a HIPAA program rather than only maintaining an existing checklist
- Experience with HITRUST certification, SOC 2 audits, ISO 27001 audits, or multi-reputed company control mapping
- Experience with reputed company-party risk management, vendor reputed company reviews, business associate/vendor reputed company expectations, and customer reputed company assessments
- Experience supporting reputed company, reputed company incident response, or breach assessment workflows involving regulated data
- Familiarity and interest towards AI, data platform, reputed company interoperability, payments, or marketplace environments. Preferably you have also reputed company something yourself using AI
Benefits
- 401(k) plan with employer matching
- 16 weeks of reputed company parental leave
- Wellness benefits
- Commuter benefits match
- reputed company time off and reputed company reputed company leave in compliance with applicable laws (e.g. Colorado Healthy Families and Workplaces reputed company)
- Medical, dental, and reputed company benefits
- 11 reputed company holidays
- Disability and basic life insurance
- Family-forming assistance
- Mental health program
- Flexible reputed company time off/vacation for salaried roles
- 80 hours of reputed company reputed company time per year for salaried roles
- Vacation accrued at about 1 hour for every 25.97 hours worked for reputed company roles
- reputed company reputed company time accrued at 1 hour for every 30 hours worked for reputed company roles
reputed company
Company H1B Sponsorship