GRC Analyst

Job not on LinkedIn

🔥 12 hours ago

🇺🇸 United States – Remote

⏰ Full Time

🟢 Junior

🎲 Risk

🚫👨‍🎓 No degree required

👻 Ghost score 15%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Ceresti Health

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2013

🏥 Healthcare

⚕️ Healthcare Insurance

🤝 B2B

💰 $11.7M Venture Round - Ceresti Health on 2025-08

Healthcare • Healthcare Insurance • B2B

Ceresti Health is a tech-enabled care company that partners with health plans and accountable care organizations (ACOs) to support family caregivers of people living with dementia. The company combines claims-data driven risk stratification, caregiver education, a tablet-based platform, and weekly personal care navigators to improve care plan adherence, close social determinants of health gaps, and proactively detect changes in patients' conditions. Ceresti’s caregiver-led program has independently validated results showing substantial reductions in avoidable hospitalizations and per-patient medical costs, and it offers no-risk, outcomes-based contracts for payers.

📋 Description

• Collect evidence for SOC 2 Type 2 and HITRUST, including internal audit testing of controls • Track control evidence status and keep the CISO informed • Coordinate with Security, IT, and Engineering control owners to gather audit artifacts • Update security and privacy policies, manage versions, and track employee acknowledgment • Maintain documented proof that policies are being followed across the company • Run third-party vendor risk assessments, document findings, and escalate issues requiring a decision • Support HIPAA and other healthcare compliance obligations alongside the CISO • Support data retention, de-identification, and disposal programs • Support the Privacy and Data Program

🎯 Requirements

• One to three years of experience in governance, risk and compliance, audit, or a related field • Working knowledge of at least one of SOC 2, HITRUST, or HIPAA, and the appetite to learn the others quickly • Clear, precise writing • Attention to detail and patience to track many small items to completion • Comfort following up with colleagues for evidence without being pushy • Exposure to a GRC or compliance-automation platform preferred • Experience in healthcare or another regulated industry preferred • Familiarity with vendor risk assessments or BAA tracking preferred • External audit exposure preferred • Employment contingent on successful completion of a background check, consistent with applicable law

🏖️ Benefits

• Full-time remote work • Competitive base salary with final offer based on experience, skills, and location • Comprehensive health, dental, and vision benefits • Equity participation in a growing healthcare technology company • PTO and a culture that respects it • A collaborative, mission-driven environment where your work directly supports family caregivers and improves outcomes for people living with dementia