We are seeking an experienced Risk and Compliance Analyst to join our team. The ideal candidate will have a strong background in risk management, compliance, and audit, with expertise in HITRUST, NIST, ISO, and SOC Type 2 audits. Additionally, experience with GRC platforms is highly desirable. The successful candidate will be responsible for managing and analyzing risk across our organization, ensuring compliance with regulatory requirements and industry standards.
Key Responsibilities:
- Conduct risk assessments and develop risk mitigation strategies
- Manage and analyze risk across the organization, identifying potential threats and vulnerabilities
- Develop and implement compliance programs to ensure adherence to regulatory requirements and industry standards
- Collaborate with internal stakeholders to develop and implement effective risk management strategies
- Conduct audits and assessments to ensure compliance with regulatory requirements and industry standards
- Develop and maintain risk management policies and procedures
- Provide training and awareness sessions to employees on risk management and compliance
- Stay up-to-date with industry trends and regulatory changes, and provide recommendations for improvement
Requirements:
- Bachelor's degree in a related field (e.g., business, finance, or information systems)
- 3+ years of experience in risk management, compliance, or a related field
- Strong understanding of HITRUST, NIST, ISO, and SOC Type 2 audits
- Experience with GRC platforms (e.g., ServiceNow)
- Excellent analytical and problem-solving skills
- Ability to communicate complex risk concepts to non-technical stakeholders
- Strong attention to detail and organizational skills
- Ability to work in a fast-paced environment and meet deadlines