Senior GRC Analyst

About the role

A technical compliance role focused on keeping security certifications and controls strong across a healthcare data platform. The work supports enterprise trust, new business lines and secure growth.

What you will do

• Act as the company expert on compliance frameworks and the main contact for outside auditors and assessors
• Keep the security and privacy trust center current and maintain the risk register with scoring and reporting
• Own compliance policies, standards and procedures and report the compliance position to senior leaders
• Extend the GRC function using AI and automation, delivering quick wins and defining needs for engineering builds

What they look for

• At least five years in GRC, IT audit or information security compliance
• Experience with control design, evidence gathering and remediation in a cloud-native engineering setting
• Ability to adjust communication for engineers, operators and executives
• A GRC engineering approach, using scripting and LLMs to automate repetitive work