Detail-oriented and experienced, the remote GRC and Privacy Analyst will manage compliance programs, lead audit cycles, and embed privacy-by-design principles in a health-focused, data-sensitive organization. Key responsibilities Administer and optimize compliance automation platforms, ensuring continuous control monitoring and evidence collection Lead and support audits across multiple frameworks, coordinating with internal stakeholders and external assessors Conduct risk assessments, manage evidence and control documentation, and apply project management discipline to compliance initiatives Required qualifications Demonstrated experience with GRC and compliance automation applications, particularly Vanta Working knowledge of key security and privacy frameworks such as SOC 2, ISO 27001, and HIPAA Strong understanding of privacy regulations, including HIPAA and GDPR Proven experience managing or supporting audits and applying structured project management practices Relevant certifications (e.g., CISA, CIPP, ISO 27001 Implementer) and experience in a regulated data environment
GRC and Privacy Analyst in workfromhome at Unknown Company
This position is listed as full time and able to be worked remotely.