Remote Legal Jobs • SOC2

As a Senior Governance, Risk and Compliance (GRC) Analyst, you will establish risk and compliance programs, focusing on automation and repeatability, particularly for PCI DSS and SOC 2 Type 2. You will manage third-party cybersecurity risks, vulnerability management, and phishing programs, while collaborating with engineers to triage vulnerabilities. You'll maintain security policies and advise leadership on risk management strategies, ensuring broad security awareness and supporting tech compliance requirements.

The Senior Compliance Specialist will assist with all matters relating to Information Security compliance including SOC 2 Type II, HITRUST, Health Insurance Portability and Accountability Act (HIPAA), General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), ISO 27001, ISO 42001 and ITGC-SOX. This is a full time position that is fully remote.