Note: The job is a remote job and is open to candidates in USA. Thrive Global is a behavior change technology company focused on improving well-being, performance, and mental resilience through an AI-powered platform. The GRC and Privacy Analyst will strengthen the company’s security, compliance, and data privacy posture by operationalizing compliance programs, managing audits, conducting risk assessments, and embedding privacy-by-design principles.
Responsibilities
- Administer and optimize compliance automation platforms such as Vanta, maintaining continuous control monitoring and evidence collection
- Lead and support audits across multiple frameworks, coordinating with internal stakeholders and external assessors
- Maintain and mature compliance programs mapped to SOC 2, ISO 27001, ISO 27701, ISO 42001, HITRUST, HIPAA, NIST 800-53, and the NIST AI Risk Management Framework (AI RMF)
- Interpret and apply privacy standards including HIPAA and GDPR, ensuring data handling practices meet regulatory obligations
- Conduct risk assessments, track remediation efforts, and manage evidence and control documentation
- Apply project management discipline to compliance initiatives — setting timelines, coordinating cross-functional owners, and driving deliverables to completion
- Leverage AI tools to improve efficiency in evidence review, policy drafting, risk analysis, and reporting workflows
Skills
- Demonstrated experience with GRC and compliance automation applications, particularly Vanta
- Working knowledge of key security and privacy frameworks: SOC 2, ISO 27001, ISO 27701, ISO 42001, HITRUST, HIPAA, NIST 800-53, and NIST AI RMF
- Strong understanding of privacy regulations, including HIPAA and GDPR
- Proven experience managing or supporting audits and applying structured project management practices
- Comfort and fluency with AI tools and a willingness to integrate them into daily workflows
- Excellent written and verbal communication skills, with strong attention to detail
- Relevant certifications (e.g., CISA, CIPP, ISO 27001 Implementer)
- Experience in a healthcare, wellness, or otherwise regulated data environment
- Familiarity with AI governance and emerging AI compliance requirements
Benefits
- Mission-Driven Impact: Be part of a company that’s truly making a difference in people’s lives around the world.
- Career Growth: Develop within the company and help shape our growth strategy.
- Human-Centric Culture: Thrive in a supportive environment with a range of wellness perks and benefits.
- Medical, dental, and vision coverage.
- 401(k) program with company match.
- Generous paid time-off programs, including Thrive Time, which gives employees additional paid time off after major projects or intense periods of work to recharge and recover.
Company Overview