> Markdown version of [/jobs/ext/4440069-grc-analyst](https://www.wearedevelopers.com/jobs/ext/4440069-grc-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# GRC Analyst

- **Company:** RxBenefits Inc
- **Location:** United States (Remote available)
- **Experience:** Experienced
- **Salary:** $80,800.0 - $101,000.0
- **Contract:** Permanent contract
- **Skills:** Control Objectives for Information and Related Technology (COBIT), IT General Controls (ITGC)
- **Published:** October 21, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=da093d7e888c19c8

## About the Role

* Bachelor's degree or relevant equivalent experience
 * 3+ years of Audit, Risk or Compliance experience
 * 3+ years of experience with HIPAA regulatory controls, SSAE, SOC1 and SOC2
 * Ability to juggle multiple work efforts and to quickly change direction
 * Ability to work in a very detailed manner as well as to look broadly across a population and develop connections and themes identifying risk and concerns
 * Sound organizational, analytical, oral, and written communication skills - Ability to successfully communicate to influence management and lead change in both strategic and tactical initiatives
 * Self-starter, desire to learn, able to teach others, high energy, positive attitude, exhibits flexibility

Preferred Skills/Experience:

 * 5+ years of experience with IT general controls and other IT controls aligned with frameworks such as NIST, ISO, and COBIT

 * Healthcare industry experience preferred
 * Experience working with external audit firms preferred

## Description

* Work with RxBenefits teams to identify and maintain a list of high-value assets and their associated threats and vulnerabilities to ensure effective risk mitigation.
 * Document and maintain processes across the enterprise to reduce security risk; work with partners across the organization to design and mature security controls to support the mitigation of risks.
 * Perform routine or ad-hoc security risk assessments on various topics as needed or in response to management requests.
 * Assist in maintaining the GRC platform to document controls, risk information, and other related details.
 * Produce periodic views/ reports of security risk to inform executives of the health of the program and of the company's risk position.
 * Prepare for and assists with responding to internal and external audits.
 * Evaluates impact of all control deficiencies in an audit, expands and refines control deficiency documentation to drive actionable business impact.
 * Work with RxBenefits Clients to respond to security questionnaire and/or audit report requests.
 * Exercises judgment and critical thinking to influence business partners.
 * Helps business partners balance their business strategy with appropriate risk management controls.
 * Stay up to date with latest audit and compliance trends.
 * Manages 3rd party vendor assessment and compliance.
 * Assist with development of policies, procedures, and standards.
 * All other duties as assigned.