Senior GRC Analyst

🕒 vor 20 Tagen

Jetzt Bewerben

Ähnliche Remote-Jobs finden

E-Mails für Remote-Jobs erhalten

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen

Benepass

WebsiteLinkedInAlle Stellen

11 - 50 Mitarbeiter

👥 HR Tech

💸 Finanzen

🧘 Wellness

💰 €12.000.000 Series A im 2021-09

HR Tech • Finance • Wellness

Benepass ist eine flexible Plattform für Mitarbeitervergünstigungen, die für Unternehmen entwickelt wurde, die Wert auf das Mitarbeitererlebnis legen. Sie bietet anpassbare Leistungsprogramme, die auf die vielfältigen Bedürfnisse der heutigen globalen Belegschaft zugeschnitten sind, darunter Lifestyle-Ausgabenkonten, Wellness-Leistungen und Vorteile zur beruflichen Weiterentwicklung. Durch die Konsolidierung von steuerfreien Leistungen und Vorteilprogrammen in einer Plattform vereinfacht Benepass das Leistungsmanagement und steigert die Mitarbeiterbindung. Ihre Plattform bietet eine Vielzahl von Ausgabemöglichkeiten über sowohl physische als auch virtuelle Karten, begleitet von Echtzeitmetriken und automatisierten Compliance-Funktionen, die eine effiziente Verwaltung und erhöhte Mitarbeiterzufriedenheit ermöglichen.

Beschreibung

• Maintain and improve information security policies, standards, procedures, control documentation, and related governance materials. • Help map policies and controls to frameworks such as SOC 2, ISO 27001/27002, HITRUST, NIST CSF 2.0, and other customer, regulatory, or security requirements. • Support policy exceptions, risk acceptances, remediation tracking, control owner follow-ups, and recurring governance workflows. • Support SOC 2, ISO 27001, and HITRUST readiness, audit preparation, evidence collection, auditor coordination, and audit response management. • Maintain recurring evidence-gathering and control testing workflows, helping ensure controls operate consistently across the business. • Track audit findings, control gaps, remediation plans, owners, due dates, and closure evidence. • Support risk assessments, control gap assessments, internal reviews, and maintenance of the risk register. • Translate technical and security risks into clear business language, including mitigations, ownership, timelines, and residual risk. • Own or support customer security questionnaires, RFP security sections, due diligence requests, and trust or compliance documentation. • Maintain reusable questionnaire content, approved responses, compliance artifacts, and customer-facing assurance materials. • Support employee security awareness programs and create clear internal guidance for policies, controls, and compliance responsibilities. • Support vendor security reviews, third-party risk assessments, remediation tracking, risk acceptance documentation, and vendor compliance evidence. • Use GRC platforms such as Vanta, Drata, Thoropass, Secureframe, or similar tools to improve evidence collection, control monitoring, task tracking, reporting, and repeatable compliance operations.

🎯 Anforderungen

• 5+ years of experience in GRC, information security compliance, IT audit, risk management, security assurance, or a closely related field. • Hands-on experience supporting SOC 2 audits and readiness activities. • Working knowledge of ISO 27001/27002, HITRUST, NIST CSF, or similar security and compliance frameworks. • Experience maintaining security policies, controls, control narratives, evidence repositories, and audit documentation. • Experience supporting internal or external audits, including evidence collection, auditor coordination, control owner follow-up, and remediation tracking. • Strong written communication skills, with the ability to produce clear policies, questionnaire responses, process documentation, and stakeholder updates. • Excellent attention to detail and project management discipline. • Experience responding to customer security questionnaires, RFP security sections, or due diligence requests. • Familiarity with GRC, compliance automation, or audit management tools. • Experience in SaaS, fintech, benefits, healthcare, or other regulated environments. • Comfort working in a startup or fast-moving environment where processes need to be mature enough to scale without creating unnecessary friction. • Ability to work with both technical and non-technical teams and communicate security and compliance expectations clearly.

🏖️ Vorteile

• 95% coverage of medical, dental, and vision • $250 WFH setup (one time) • $500/year Learning & Development Benefit • $150/month cell phone + internet • $100/month Wellness • $100/month Co-working and Commuter Benefit • Flexible PTO