Note: The job is a remote job and is open to candidates in USA. Garner Health is hiring a Senior GRC Analyst to maintain its compliance posture across security and healthcare privacy frameworks. The role manages audits and control testing, partners with internal teams and external assessors, and improves risk management and compliance processes, including through AI and automation.
Responsibilities
- Manage and support our compliance certifications, including SOC 2, HITRUST, and ISO 27001 audits and run control testing across the audit lifecycle
- Serve as the subject matter expert across the company on our compliance frameworks
- Serve as the primary point of contact for external auditors and assessors
- Manage Garner’s Security and Privacy trust center
- Maintain the risk register and drive risk identification, scoring, and reporting
- Manage the maintenance of our compliance policies, standards, and procedures
- Report on our compliance posture to senior leadership
- Scale our GRC function with AI and automation, building quick wins and scoping requirements for Engineering to fully automate the rest
Skills
- 5+ years of experience in GRC, IT audit, or information security compliance
- Prior experience with HITRUST, SOC 2, and ISO 27001 audits
- Hands-on experience with control design, evidence collection, and remediation in a cloud-native engineering environment
- Proven ability to adapt your communication style across engineers, operators, and executives
- A GRC Engineering mindset with prior experience using scripting and LLMs to automate repetitive tasks
- A desire to be a part of a high-performing, mission-driven team that operates with intense urgency, a strong sense of individual accountability, and a commitment to authentic feedback
- Industry certifications such as CISA, CISM, CISSP, CRISC, or ISO 27001 Lead Auditor preferred
Benefits
- Equity incentive
- Flexible PTO
- Medical/Dental/Vision plan options
- 401(k)
- Teladoc Health
Company Overview