GRC & Privacy Analyst

📋 Description

• Administer and optimize compliance automation platforms (e.g., Vanta).
• Lead audits across security, privacy, and compliance frameworks.
• Mature programs aligned with SOC 2, ISO 27001/27701/42001, HITRUST, HIPAA, NIST 800-53, NIST RMF AI.
• Interpret privacy requirements (HIPAA, GDPR) and data-handling practices.
• Conduct risk assessments and track remediation with evidence docs.
• Coordinate initiatives with stakeholders and drive deliverables to completion.

🎯 Requirements

• GRC, security compliance, or related experience; familiarity with Vanta.
• Knowledge of SOC 2, ISO 27001/27701/42001, HITRUST, HIPAA, GDPR, NIST 800-53, NIST RMF AI RMF.
• Strong privacy regs knowledge (HIPAA, GDPR).
• Audits, evidence collection, control docs, risk assessments, remediation.
• Project management across multiple stakeholders and timelines.
• Comfort with AI tools in compliance workflows; strong communication.

🎁 Benefits

• Competitive total compensation ($115k–$125k target, varies by experience).
• Health coverage (medical, dental, vision).
• 401(k) with company match.
• Generous PTO and Thrive Time for major projects.
• Wellness-focused culture and mission-driven work.
• Remote flexibility; US-based remote