GRC Analyst

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $80.9k - $137.6k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

🎲 Risk

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

US Anesthesia Partners

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

Founded 2012

💼 Consulting

🏥 Healthcare

⚕️ Healthcare Insurance

Consulting • Healthcare • Healthcare Insurance

US Anesthesia Partners is a leading provider of comprehensive anesthesia services, dedicated to delivering exceptional patient care and operational excellence. Founded by a team of forward-thinking anesthesiologists, USAP specializes in various anesthesiology areas including cardiovascular care, obstetrics, and pediatrics. With a network of thousands of clinicians and hundreds of facility partners across the nation, they serve over two million patients annually, aiming to redefine the standards of quality in anesthesia services.

📋 Description

• Design, configure, and govern control frameworks and risk workflows within the GRC platform • Establish and maintain control procedures aligned with internal policy, HIPAA, HITRUST, PCI, SOC 2, NIST, and other applicable frameworks • Develop and maintain control libraries, including narratives, ownership assignments, testing frequency, and evidence requirements • Monitor and update risk registers, including risk tracking, scoring, and prioritization • Drive automation workflows for control testing, evidence collection, attestations, and remediation • Track policy review cycles and maintain current documentation • Lead information security risk assessments across IT, operational, and third-party domains • Perform control walkthroughs and operating effectiveness testing; document results and identify gaps • Collaborate with internal teams and external auditors on audits and assessments • Maintain regulatory documentation and control mappings • Prepare reports, dashboards, and metrics on control effectiveness, risk status, and compliance gaps • Map controls to regulatory and framework requirements to reduce duplicative testing • Gather audit evidence, coordinate stakeholder responses, and track remediation through closure • Manage audit findings, corrective action plans, and remediation timelines in the GRC platform • Guide risk assessments, document vulnerabilities and threats, and maintain supporting evidence • Partner with stakeholders on risk mitigation strategies, progress, and ownership • Develop, monitor, and report KRIs and KPIs • Apply consistent risk-scoring methodologies, including likelihood, impact, and residual-risk calculations • Escalate significant risks and control deficiencies to management and governance committees • Lead information security policy, procedure, standard, and guideline lifecycle management • Direct policy review and approval workflows • Evaluate third-party vendors for security and compliance risks • Track vendor risk assessments, reassessment cycles, and risk ratings • Develop and monitor vendor remediation action plans • Support vendor onboarding and offboarding risk reviews • Improve GRC processes and workflows through automation and integration • Monitor GRC industry trends, emerging threats, and best practices • Guide program assessments and maturity benchmarking • Perform other assigned duties

🎯 Requirements

• Bachelor’s degree in information security, cybersecurity, computer science, information technology, business administration, or a closely related field required; equivalent experience may be considered in lieu of a degree • 4+ years of relevant information security, compliance, or GRC experience may substitute for a degree • Minimum of 5 years relevant experience in governance, risk, and compliance functions within IT or information security • Experience with AuditBoard (now named Optro) highly preferred • CISA preferred • CRISC preferred • CISM preferred • Other relevant certifications, such as CompTIA Security+ or ISO 27001 Lead Auditor, preferred • Prior experience implementing, managing, or auditing security policies and procedures • Familiarity with HIPAA, NIST CSF, SOC 2, HITRUST, and other compliance frameworks • Prior experience conducting risk assessments and supporting risk management activities • Excellent written and verbal communication skills, including communicating technical concepts and compliance requirements to technical and non-technical stakeholders • Ability to manage multiple priorities, work independently, and collaborate across cross-functional teams • Must reside in the United States; USAP does not hire candidates residing in California, Hawaii, or Alaska

🏖️ Benefits

• Annual bonus eligibility; bonuses are based on company and individual performance and are not guaranteed • Reasonable accommodations for individuals with disabilities • Equal employment opportunity protections