Coordinates corporate security, risk, and compliance initiatives; maintains security controls, asset and vulnerability information, GRC records, and executive risk reporting. Performs risk assessments, supports internal and external audits, evaluates control deficiencies, manages vendor assessments, responds to client security questionnaires, and develops policies and procedures. Requires experience with HIPAA, SSAE, SOC 1, SOC 2, and IT controls aligned with NIST, ISO, and COBIT frameworks.
The GRC Analyst will coordinate and independently execute corporate compliance initiatives. This role will work closely with the security and compliance teams and play a key role in implementing and executing RxBenefits compliance vision. The ideal candidate will have strong program and project management skills and high attention to detail with the ability to multi-task.
Essential Job Responsibilities Include:
- Work with RxBenefits teams to identify and maintain a list of high-value assets and their associated threats and vulnerabilities to ensure effective risk mitigation.
- Document and maintain processes across the enterprise to reduce security risk; work with partners across the organization to design and mature security controls to support the mitigation of risks.
- Perform routine or ad-hoc security risk assessments on various topics as needed or in response to management requests.
- Assist in maintaining the GRC platform to document controls, risk information, and other related details.
- Produce periodic views/ reports of security risk to inform executives of the health of the program and of the company’s risk position.
- Prepare for and assists with responding to internal and external audits.
- Evaluates impact of all control deficiencies in an audit, expands and refines control deficiency documentation to drive actionable business impact.
- Work with RxBenefits Clients to respond to security questionnaire and/or audit report requests.
- Exercises judgment and critical thinking to influence business partners.
- Helps business partners balance their business strategy with appropriate risk management controls.
- Stay up to date with latest audit and compliance trends.
- Manages 3rd party vendor assessment and compliance.
- Assist with development of policies, procedures, and standards.
- All other duties as assigned.
Required Skills / Experience:
- Bachelor’s degree or relevant equivalent experience
- 3+ years of Audit, Risk or Compliance experience
- 3+ years of experience with HIPAA regulatory controls, SSAE, SOC1 and SOC2
- Ability to juggle multiple work efforts and to quickly change direction
- Ability to work in a very detailed manner as well as to look broadly across a population and develop connections and themes identifying risk and concerns
- Sound organizational, analytical, oral, and written communication skills – Ability to successfully communicate to influence management and lead change in both strategic and tactical initiatives
- Self-starter, desire to learn, able to teach others, high energy, positive attitude, exhibits flexibility
Preferred Skills/Experience:
- 5+ years of experience with IT general controls and other IT controls aligned with frameworks such as NIST, ISO, and COBIT
- Healthcare industry experience preferred
- Experience working with external audit firms preferred
Based on relevant market data and other factors, the anticipated hiring range for this role is $80,800 to $101,000 annually. Final compensation rates will be determined based on various factors, including but not limited to experience, skills, knowledge, and internal equity considerations. This role is also short-term incentive eligible. Incentive amounts will vary by individual and business goals.
We are committed to fair and equitable compensation practices. The final salary offered to the selected candidate may vary from the posted range due to individual qualifications. Our goal is to ensure that all teammates are compensated fairly and competitively based on their contributions to our organization.
RxBenefits is also committed to providing best in class benefits to our teammates. We offer a robust total rewards package that includes:
- Remote first work environment
- Choice of a HDHP or PPO Medical plan, we pay 100% of the premium for the HDHP for you and your eligible family members
- Dental, Vision, Short- and Long-Term Disability, and Group Life Insurance that we also pay 100% of premiums (for your family too on Dental and Vision)
- Additional buy-up options for Short- and Long-Term Disability and Life Insurance
- 401(k) with an employer match up to 3.5% available after 60 days
- Community Service Day to give back and support what you love in your community
- 10 company holidays including MLK Day, Juneteenth, and the day after Thanksgiving plus a floating holiday to use as you like
- Reimbursements for high-speed internet, we’ll send you a computer and monitors to help you do your best work
- Tuition Reimbursement for accredited degree programs
- Paid New Parent Leave that can be used for adoption or birth
- Pet insurance to protect your furbabies
- A robust mental health benefit and EAP service through Spring Health to support you when you need it most
Similar Jobs
Fintech • Hardware • Payments
The Senior Cybersecurity GRC Analyst will automate governance, risk, and compliance workflows, including evidence collection, control testing, risk reporting, and compliance questionnaires. The role supports IGA implementation, access reviews, phishing programs, Trust Center management, and integrations across GRC, identity, ticketing, and security tools. Responsibilities include aligning controls with NIST, PCI-DSS, SOC 2, and SOX, optimizing the security technology stack, developing automation roadmaps, and presenting risk insights to leadership.
Top Skills:
APIsArcherGrc PlatformsHyperproofIdentity Governance And Administration (Iga)Knowbe4Low-Code ToolsMicrosoft Defender For Office 365Microsoft Entra Id GovernanceExcelNist CsfNist Sp 800-53Okta Identity GovernancePci-DssPower BIPowershellProofpointPythonSailpointSaviyntServicenowSisenseSoc 1Soc 2Sox
Artificial Intelligence • Big Data • Healthtech • HR Tech • Machine Learning • Software • Big Data Analytics
Manage Garner’s GRC and technical compliance program across SOC 2, HITRUST, ISO 27001, and HIPAA. Lead internal control testing, external audits, risk-register management, policy maintenance, trust-center operations, and executive compliance reporting. Partner with Engineering, Product, People, and Legal to improve controls and remediation. Use scripting, LLMs, and automation to scale GRC processes in a cloud-native environment.
Top Skills:
AWSClaudeDatadogGitlabHipaaHitrustIso 27001LlmsOktaRetoolScriptingSoc 2Vanta
Fintech • Financial Services
The GRC Analyst manages third-party risk assessments, vendor due diligence, security policies, risk analysis, internal audits, and SOC 2 audit support. The role involves maintaining the GRC program, tracking findings, coordinating stakeholders, promoting security awareness, and using AI and machine learning to automate compliance processes. Candidates should have 1–2+ years of relevant experience, strong communication skills, and familiarity with risk methodologies, vendor assessments, policies, and compliance audits.
Top Skills:
Artificial IntelligenceAWSMachine LearningSoc 2
What you need to know about the Chicago Tech Scene
With vibrant neighborhoods, great food and more affordable housing than either coast, Chicago might be the most liveable major tech hub. It is the birthplace of modern commodities and futures trading, a national hub for logistics and commerce, and home to the American Medical Association and the American Bar Association. This diverse blend of industry influences has helped Chicago emerge as a major player in verticals like fintech, biotechnology, legal tech, e-commerce and logistics technology. It’s also a major hiring center for tech companies on both coasts.
Key Facts About Chicago Tech
- Number of Tech Workers: 245,800; 5.2% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: McDonald’s, John Deere, Boeing, Morningstar
- Key Industries: Artificial intelligence, biotechnology, fintech, software, logistics technology
- Funding Landscape: $2.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Pritzker Group Venture Capital, Arch Venture Partners, MATH Venture Partners, Jump Capital, Hyde Park Venture Partners
- Research Centers and Universities: Northwestern University, University of Chicago, University of Illinois Urbana-Champaign, Illinois Institute of Technology, Argonne National Laboratory, Fermi National Accelerator Laboratory
