GRC Analyst

Support the development and implementation of GRC strategies within ModMed to ensure adherence to regulatory requirements, industry standards, and cybersecurity best practices. This role conducts risk assessments, assists in creating and managing cybersecurity governance framework. You will develop and maintain cybersecurity policies, procedures, and standards and align cybersecurity practices with business objectives and regulatory requirements. The role will ensure compliance with industry regulations and standards (PCI, HIPAA, SOC2). Regular audits and assessments to ensure adherence to compliance requirements and collaborate with internal and external auditors during compliance reviews and audits. Prepare reports on GRC activities and metrics for senior security management and maintain comprehensive documentation of all GRC activities, policies, and procedures.