Governance, Risk, and Compliance Analyst

Description:

About Gifthealth
At Gifthealth, we’re on a mission to make pharmacy easier and more affordable for patients and providers nationwide. In just a short time, we’ve served thousands of patients and are rapidly expanding across the country. Health is our most precious gift, and we believe it should be a priority, not a privilege.

Position Overview
We are seeking a detail-oriented and motivated Junior Governance, Risk, and Compliance Analyst to support our GRC team in ensuring the organization's policies, procedures, and operations meet regulatory and internal standards.

How You’ll Help Us Grow

• Assist in the development, review, and maintenance of GRC policies, procedures, and frameworks.
• Support internal audits and risk assessments across departments.
• Monitor compliance with applicable regulations (e.g., HIPAA, PCI-DSS, etc.).
• Help track and remediate risks, issues, and control deficiencies.
• Maintain GRC tools and systems, ensuring data accuracy and completeness.
• Collaborate with cross-functional teams to gather evidence for compliance reporting.
• Assist with third-party vendor risk assessments.
• Stay current on evolving regulatory landscapes and cybersecurity best practices.
  

Requirements:

A Few Things About You

• 1-3 years of experience in compliance, audit, IT security, or risk management.
• Strong attention to detail and organizational skills.
• Basic understanding of information security concepts and regulatory requirements.
• Highly proficient in Microsoft Office Suite (specifically Excel/Google Sheets) and/or GRC platforms.
• Excellent verbal and written communication skills.

Preferred Qualifications:

• Familiarity with frameworks such as NIST, ISO 27001, COBIT, or SOC 2.
• Internship or prior experience in a GRC, cybersecurity, or risk-related role.
• Exposure to privacy regulations (e.g., HIPAA, CCPA).
• Knowledge of enterprise risk management (ERM) processes.
• Certifications such as Security+, GRC Analyst Certification, or pursuit of CISA, CRISC, or CISSP (Associate) are a plus.

Our Offer To Ensure You Choose Gifthealth

• Competitive salary and comprehensive benefits package (healthcare, dental, vision).
• Retirement savings plan (401k) with company match.
• Generous paid time off.
• Continuous professional development opportunities in a supportive and innovative work environment.
• A chance to be at the forefront of transforming pharmacy and directly impacting patient care.

Gifthealth is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.

Join us in transforming healthcare and building the teams that make it happen. Apply today!