Note: The job is a remote job and is open to candidates in USA. Ceresti Health is hiring a GRC Analyst to document and maintain audit-ready evidence for its security and privacy controls. The role supports SOC 2, HITRUST, and HIPAA compliance through control documentation, policy and vendor risk management, and healthcare data lifecycle programs.
Responsibilities
- Collect evidence for SOC 2 Type 2 and HITRUST including internal audit testing of controls
- Track control evidence status and keep the CISO informed
- Coordinate with control owners across Security, IT, and Engineering to gather audit artifacts
- Update security and privacy policies, manage versions, and track that people have read/acknowledged them
- Maintain documented proof that policies are being followed across the company
- Run third-party vendor risk assessments, document findings, and escalate anything that needs a decision
- Support HIPAA and other healthcare compliance obligations alongside the CISO
- Support the data retention, de-identification, and disposal program
- Support the Privacy and Data Program
Skills
- One to three years of experience in governance, risk and compliance, audit, or a related field
- Working knowledge of at least one of SOC 2, HITRUST, or HIPAA, and the appetite to learn the others quickly
- Clear, precise writing. Much of this role is producing documents other people depend on
- Attention to detail, and the patience to track many small items to completion
- Comfort following up with colleagues for evidence without being pushy
- You know when to resolve something yourself, escalate, and anticipate options
- You follow through on small commitments without being reminded
- You ask when something is unclear instead of guessing
- You treat compliance as something that protects patients and caregivers, not as paperwork
- Exposure to a GRC or compliance-automation platform
- Experience in healthcare or another regulated industry
- Familiarity with vendor risk assessments or BAA tracking
- External audit exposure
Benefits
- Full-time remote work
- Comprehensive health, dental, and vision benefits
- Equity participation in a growing healthcare technology company
- PTO and a culture that respects it
- A collaborative, mission-driven environment where your work directly supports family caregivers and improves outcomes for people living with dementia
Company Overview
Company H1B Sponsorship