About This Role
This role involves supporting the organization's Governance, Risk, and Compliance needs within the Information Security Department. The Compliance Analyst will conduct risk assessments, respond to security questionnaires and RFPs, implement governance policies, and participate in internal and external compliance audits. The role suits a skilled GRC analyst with a strong understanding of healthcare and IT compliance.
Responsibilities
- Ensure adherence to regulatory standards, including HIPAA, HITECH, ISO 27001, SOC 2, and CMS regulations
- Develop, review, and update policies and procedures to align with healthcare and IT compliance mandates
- Conduct internal compliance audits and risk assessments
- Participate in and support external compliance audits including HIPAA, SOC2 Type1/Type2, HITRUST, and ISO 27001
- Evaluate and respond to security questionnaires from customers and healthcare partners
- Conduct security assessment reviews to identify gaps and recommend mitigation strategies
- Support deployment and implementation of GRC tools
- Maintain and optimize GRC systems to streamline compliance and risk processes
- Provide training and support for end-users of GRC platforms
- Conduct risk assessment based on frameworks like HITRUST and NIST
- Maintain Risk Register and follow up for risk treatment
Requirements
- Bachelor’s degree in computer science or equivalent
- 2+ years of experience in the GRC field
- Strong understanding of governance, risk, and compliance principles in healthcare
- Experience handling security questionnaires and compliance assessments
- Hands-on experience with GRC tools (e.g., Hyperproof, Archer, OneTrust, ServiceNow)
- Basic IT knowledge, including cybersecurity best practices and data protection measures
- Experience conducting office audits and compliance readiness for new locations
- Excellent policy drafting and procedural documentation skills
- Strong proficiency in MS Office tools for reporting and analysis
- Strong communication skills
- Ability to work and collaborate with the US team during US morning hours
Nice to have:
About the Company
Eclat Health Solutions is looking for a skilled GRC analyst to support the organization’s Governance, Risk and Compliance needs.
