Senior GRC Analyst – Internal Governance

🔥 2 minutes ago

🇺🇸 United States – Remote

💵 $155k - $185k / year

⏰ Full Time

🟠 Senior

🎲 Risk

👻 Ghost score 8%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Garner Health

WebsiteLinkedInAll Job Openings

51 - 200 employees

💼 Consulting

📦 Logistics

🏥 Healthcare

Consulting • Logistics • Healthcare

Garner Health is focused on improving the way employees find high-quality doctors. With a belief in transparency and data-driven decision-making, they create solutions that facilitate better medical choices for employees. The team comprises healthcare operators, clinicians, engineers, and benefits experts, allowing for a multidisciplinary approach in developing these healthcare solutions.

📋 Description

• Own Garner’s annual information security risk assessment and risk register, including risk identification, scoring, treatment, and reporting • Manage risk exceptions and prepare risk acceptances for leadership decision • Run third-party and vendor risk reviews from intake through approval and periodic reassessment • Own security findings from vulnerability scanning, penetration tests, audits, client assessments, and incidents • Track remediation with Engineering, enforce SLAs, and escalate findings requiring a risk decision • Run the security and compliance training program, including annual security awareness and HIPAA training, onboarding, content refreshes, and completion tracking • Maintain compliance policies, standards, and procedures • Report compliance posture to senior leadership • Scale the GRC function with AI and automation, building quick wins and scoping requirements for Engineering

🎯 Requirements

• 5+ years of experience in GRC, IT risk management, third party risk management, or information security compliance • Experience running information security risk assessments and maintaining a risk register using established methodologies such as NIST CSF or ISO 27005 • Hands-on experience with vendor risk management and vulnerability or findings remediation programs in a cloud-native engineering environment • Working knowledge of HIPAA and SOC 2, ISO 27001, and HITRUST requirements • Track record of driving accountability across teams without direct management authority • Ability to adapt communication style across engineers, operators, and executives • Prior experience using scripting and LLMs to automate repetitive tasks • Industry certifications such as CISA, CISM, CISSP, CRISC, or ISO 27001 Lead Auditor preferred • Must be unable to require employer sponsorship or takeover of sponsorship for an employment visa

🏖️ Benefits

• Equity incentive plan • Flexible PTO • Medical/Dental/Vision plan options • 401(k) with company match • Flexible spending accounts • Teladoc Health • Accommodations for qualified individuals with disabilities in the recruiting process

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume