Governance Risk and Compliance (GRC) Analyst

Job not on LinkedIn

🔥 6 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

TurnCare™

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2011

🏥 Healthcare

🤝 B2B

💰 $6.9M Venture Round - TurnCare on 2019-11

Healthcare • B2B

TurnCare is a healthcare company that develops Guardian, a therapy system designed to adapt in real time to individual patient needs to promote early mobility in hospitalized patients. Their product aims to prevent adverse events and reduce overall length of stay by encouraging mobility and mitigating risks like tissue ischemia and reperfusion injury. Clinical claims on their site include reductions in delirium, fewer ventilator days, and higher functional status at discharge. The company lists offices in Palo Alto, CA and Pompton Plains, NJ and brands including TurnCare, Guardian, and Vasotactic.

📋 Description

• Conduct risk and impact analyses; gather evidence and inform recommendations to the business • Collect, organize, and validate audit evidence for SOC2 Type II and other frameworks; help identify and remediate gaps • Support compliance with HIPAA, HITRUST, NIST, and other applicable frameworks; document safeguards and impact assessments • Assess new and renewing vendors handling production and non-production data • Develop, maintain, and review security policies and procedures aligned with operations, audits, and regulations • Maintain documentation and drive process improvement • Review employee access, triage alerts and escalations, and monitor and validate control effectiveness • Support IAM tasks, including access reviews and least-privilege validation • Execute long-term projects against milestones and mature workflows • Maintain accurate tickets, statuses, and supporting artifacts across security and compliance work

🎯 Requirements

• Bachelor's degree and demonstrated role alignment through coursework, research, labs, internships, work experience, certifications, or special interest • Relevant experience may include security operations, IT support and systems administration, audit/risk/compliance/GRC roles, and project management or operations • Experience or familiarity with healthcare or other regulated environments • Projects involving security monitoring, access control, policy development, risk assessments, or regulatory research • Very strong verbal and written skills • Risk-based business acumen • Strong grasp of security fundamentals, including least privilege, separation of duties, vulnerability identification and assessment, response, and monitoring • Windows and macOS basics • Microsoft 365 familiarity • Understanding of control-based frameworks and SOC2 Type II evidence lifecycle • Familiarity with JIRA or similar project management/ticketing platforms • Preferred: HIPAA Security/Privacy Rule familiarity; OneTrust Tech Risk and Compliance GRC experience; progress toward CompTIA Security+, healthcare security/privacy, or IAPP certifications; audit processes, cloud security fundamentals, and Microsoft 365/SharePoint exposure

🏖️ Benefits

• Equal employment opportunity and nondiscrimination protections • Annual salary of $60,000–$70,000