> Markdown version of [/jobs/ext/4635240-grc-analyst](https://www.wearedevelopers.com/jobs/ext/4635240-grc-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # GRC Analyst - **Company:** RxBenefits Inc - **Location:** United States (Remote available) - **Experience:** Experienced - **Salary:** $80,800 - $101,000 - **Contract:** Permanent contract - **Skills:** Control Objectives for Information and Related Technology (COBIT), Cyber Security, IT General Controls (ITGC) - **Published:** November 8, 2026 - **Apply:** https://www.careerbuilder.com/job-details/grc-analyst-ga--c47c035f-3edb-478c-8a63-d2a968cff2cd ## About the Role Analysis Skills, Corporate Compliance, Detail Oriented, Analysis Skills, Project/Program Management, Multitasking, Risk Management, Computer Security, Team Player, Enterprise Protection, * Bachelor's degree or relevant equivalent experience * 3+ years of Audit, Risk or Compliance experience * 3+ years of experience with HIPAA regulatory controls, SSAE, SOC1 and SOC2 * Ability to juggle multiple work efforts and to quickly change direction * Ability to work in a very detailed manner as well as to look broadly across a population and develop connections and themes identifying risk and concerns * Sound organizational, analytical, oral, and written communication skills - Ability to successfully communicate to influence management and lead change in both strategic and tactical initiatives * Self-starter, desire to learn, able to teach others, high energy, positive attitude, exhibits flexibility Preferred Skills/Experience: * 5+ years of experience with IT general controls and other IT controls aligned with frameworks such as NIST, ISO, and COBIT * Healthcare industry experience preferred * Experience working with external audit firms preferred ## Description The GRC Analyst will coordinate and independently execute corporate compliance initiatives. This role will work closely with the security and compliance teams and play a key role in implementing and executing RxBenefits compliance vision. The ideal candidate will have strong program and project management skills and high attention to detail with the ability to multi-task., * Work with RxBenefits teams to identify and maintain a list of high-value assets and their associated threats and vulnerabilities to ensure effective risk mitigation. * Document and maintain processes across the enterprise to reduce security risk; work with partners across the organization to design and mature security controls to support the mitigation of risks. * Perform routine or ad-hoc security risk assessments on various topics as needed or in response to management requests. * Assist in maintaining the GRC platform to document controls, risk information, and other related details. * Produce periodic views/ reports of security risk to inform executives of the health of the program and of the company's risk position. * Prepare for and assists with responding to internal and external audits. * Evaluates impact of all control deficiencies in an audit, expands and refines control deficiency documentation to drive actionable business impact. * Work with RxBenefits Clients to respond to security questionnaire and/or audit report requests. * Exercises judgment and critical thinking to influence business partners. * Helps business partners balance their business strategy with appropriate risk management controls. * Stay up to date with latest audit and compliance trends. * Manages 3rd party vendor assessment and compliance. * Assist with development of policies, procedures, and standards. * All other duties as assigned.