Lead Security Analyst-GRC

📋 Description

• Evaluate and implement security controls based on frameworks such as NIST, CIS, HIPAA, SOC 2, and
• Develop and maintain policies, procedures, and documentation (controls, narratives, matrices)
• Lead SOC 2 and HITRUST audit engagements, from audit planning through remediation
• Coordinate and monitor third-party risk assessments and compliance reviews
• Own and lead BCP (Business Continuity Planning) and BIA (Business Impact Assessments) efforts
• Build and maintain security risk registry

🎯 Requirements

• 8+ years in cybersecurity, GRC, audit, or risk/compliance roles
• Experience managing SOC 2 / HITRUST audits, especially in cloud-native environments
• Strong working knowledge of security frameworks and regulatory requirements
• Demonstrated policy, data management, and risk mitigation capabilities
• Familiarity with GRC tools and audit processes
• Excellent communication and cross-functional collaboration skills

🎁 Benefits

• Mission-driven culture that values innovation, collaboration, and a commitment to excellence in
• Impactful projects that shape the future of our organization
• Opportunities for professional development through internal mobility opportunities, mentorship
• Flexible work arrangements and a supportive work-life balance