Senior GRC Analyst

Vaga não está no LinkedIn

🕒 Setembro 2

🇺🇸 Estados Unidos – Remoto (EUA)

💵 $105.000 - $135.000 / ano

⏰ Tempo Integral

🟠 Sênior

🎲 Riscos

🦅 Patrocina Visto H1B

Esta empresa já patrocinou vistos H1B no passado.

👻 Score fantasma 0%

O que significa: quão provável esta vaga está aberta sem contratação ativa.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Configurar Alerta de Email para Novas Vagas

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo

Aya Healthcare

SiteLinkedInTodas as Vagas

5001 - 10000 funcionários

Fundada em 2001

🏥 Saúde

💼 Consultoria

📦 Logística

Healthcare • Consulting • Logistics

A Aya Healthcare é um provedor de destaque de serviços de alocação de profissionais de saúde, conectando profissionais como enfermeiros e especialistas de áreas correlatas a instituições de saúde em todos os Estados Unidos. A empresa oferece enfermagem de viagem (travel nursing), turnos por diária (per diem) e contratação permanente, garantindo que hospitais e sistemas de saúde tenham a equipe necessária para oferecer atendimento ao paciente de alta qualidade. A Aya Healthcare concentra-se em aprimorar o setor de staffing por meio de tecnologia inovadora e atendimento ao cliente excepcional.

Descrição

• Own assigned GRC projects, compliance deliverables, and process improvements from planning through completion • Support the day-to-day operation and continuous improvement of Aya’s enterprise GRC program • Design and improve scalable workflows translating regulatory and framework requirements into control activities and operational responsibilities • Support SOC 2 and ISO/IEC 27001:2022 compliance, including readiness, audit preparation, evidence coordination, control testing, auditor support, and remediation tracking • Establish control ownership, traceability, documentation, and evidence requirements • Replace manual or spreadsheet-driven compliance activities with automated, system-driven processes • Improve automated evidence collection, control testing, issue and remediation tracking, dashboards, and reporting • Conduct control reviews, risk assessments, evidence evaluations, and compliance gap analyses • Monitor remediation, follow up with control owners, identify delivery risks, and escalate issues • Build and maintain dashboards, metrics, and reports communicating compliance status, trends, exceptions, risks, and remediation progress • Partner with ServiceNow platform and engineering teams on scalable, supportable GRC solutions • Respond to customer compliance, security, privacy, and risk questions in RFPs, due diligence requests, contracts, and meetings • Collaborate with Security, IT, Engineering, Finance, Legal, Privacy, Internal Audit, and business stakeholders • Translate risk and compliance requirements into actionable business guidance • Lead working sessions, walkthroughs, and process discussions with control owners and subject-matter experts • Identify emerging risks, process dependencies, and long-term GRC improvements • Guide junior analysts and teammates through collaboration, knowledge sharing, and example • Review work products for accuracy, completeness, and quality standards • Document process improvements, design decisions, procedures, and lessons learned

🎯 Requisitos

• 4+ years of experience in Governance, Risk, and Compliance, Information Security, IT Audit, or a related discipline • Hands-on experience operating or configuring GRC tools such as ServiceNow GRC / IRM, Drata, Vanta, or Hyperproof • Experience owning GRC projects, compliance deliverables, or process-improvement initiatives from planning through completion • Strong working knowledge of SOC 2 or ISO/IEC 27001:2022 • Experience with control design, evidence evaluation, risk assessments, audit support, remediation tracking, or compliance testing • Experience improving manual compliance processes through automation, workflow design, or system-based reporting • Strong written and verbal communication skills, with ability to explain risk and compliance concepts to technical and non-technical audiences • Ability to work independently, manage competing priorities, anticipate next steps, and escalate risks early • Experience collaborating across Information Security, IT, Engineering, Legal, Privacy, Finance, Audit, and business teams • Bachelor’s degree in IT / CS is preferred • CISA, CISSP (or CISSP Associate), CCSP, ISO 27001 credential, or another relevant security or compliance certification is preferred • Experience with additional security, compliance, AI governance, and privacy frameworks or regulatory requirements, including ISO/IEC 42001, NIST AI RMF, NIST CSF, GDPR/UK GDPR, and CCPA/CPRA, is a plus • Experience with ServiceNow GRC / IRM implementation, administration, configuration, or integration is preferred • Experience developing GRC metrics, dashboards, KPIs, or leadership reporting is preferred • Experience supporting internal or external audits in a regulated or healthcare-related environment is preferred • PST business-hours availability

🏖️ Benefícios

• Free premium medical, dental, life and vision insurance • Generous 401(k) match • Reimbursements • Discretionary bonuses • Paid sick leave in accordance with applicable state, federal, and local laws • Celebrations and rewards for achieving goals • Company-sponsored virtual events, happy hours, and team-building activities • Birthday treat • Unlimited DTO (time off) • Daily virtual yoga, meditation, or boot camp classes