Sr. GRC Analyst - Internal Governance
Benefits
Unlimited PTO
Similar Jobs
See allGRC Analyst
Radicle Health
US
Risk Assessment
Compliance
Information Security
Senior GRC Analyst
Ping Identity
US
ISO 27001
SOC 2
Risk Assessment
Sr. GRC Analyst
DriveTime Family of Brands
US
GRC
Risk Management
NIST CSF
GRC Engineer
Gainsight
Mexico
GRC
SOC 2
ISO 27001
GRC Officer
TwinStream
UK
Governance
Compliance
Risk Management
About the role:
- You will own recurring risk, vendor, findings, and governance work that keeps Garner's security program operating well between audits.
- You will partner across departments so risks are identified early, decisions are deliberate, and remediation gets done.
What you will do:
- Own the annual information security risk assessment and risk register, including risk exceptions and acceptances.
- Run third-party and vendor risk reviews and drive security findings to resolution with Engineering.
- Manage the security and compliance training program and report on compliance posture to leadership.
What you will bring:
- 5+ years of experience in GRC, IT risk management, third-party risk, or information security compliance.
- Experience with NIST CSF or ISO 27005, HIPAA, SOC 2, ISO 27001, and HITRUST.
- A GRC engineering mindset with scripting and LLM automation experience.
Garner Health
Garner partners with employers to transform U.S. healthcare by using clinical data and incentives to steer members to higher-quality, lower-cost care. The company has raised a Series E, served over 2.5 million people, and is known for a mission-driven, high-performing culture.