GRC Analyst

Ceresti Health

. Collect evidence for SOC 2 Type 2 and HITRUST, including internal audit testing of controls .

Posted 10/20/2026full-timeRemote • United StatesJuniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in governance, risk, and compliance with a focus on SOC 2, HITRUST, and HIPAA. Capable of managing audit processes, tracking compliance evidence, and supporting healthcare regulatory obligations.

Highest-signal resume keywords

Governance, Risk And ComplianceSOC 2HITRUSTHIPAAVendor Risk Assessments

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Internal Audit TestingControl Evidence TrackingCompliance DocumentationData Retention ManagementDe-Identification Programs

Soft Skills

Clear WritingAttention To DetailFollow-Up CommunicationPatience

Tools & Technologies

GRC PlatformCompliance-Automation Platform

Industry Keywords

Healthcare ComplianceRegulated IndustryThird-Party Vendor RiskBAA TrackingExternal Audit Exposure

About the role

Key responsibilities & impact

Collect evidence for SOC 2 Type 2 and HITRUST, including internal audit testing of controls
Track control evidence status and keep the CISO informed
Coordinate with Security, IT, and Engineering control owners to gather audit artifacts
Update security and privacy policies, manage versions, and track employee acknowledgment
Maintain documented proof that policies are being followed across the company
Run third-party vendor risk assessments, document findings, and escalate issues requiring a decision
Support HIPAA and other healthcare compliance obligations alongside the CISO
Support data retention, de-identification, and disposal programs
Support the Privacy and Data Program

Requirements

What you’ll need

One to three years of experience in governance, risk and compliance, audit, or a related field
Working knowledge of at least one of SOC 2, HITRUST, or HIPAA, and the appetite to learn the others quickly
Clear, precise writing
Attention to detail and patience to track many small items to completion
Comfort following up with colleagues for evidence without being pushy
Exposure to a GRC or compliance-automation platform preferred
Experience in healthcare or another regulated industry preferred
Familiarity with vendor risk assessments or BAA tracking preferred
External audit exposure preferred
Employment contingent on successful completion of a background check, consistent with applicable law

Benefits

Comp & perks

Full-time remote work
Competitive base salary with final offer based on experience, skills, and location
Comprehensive health, dental, and vision benefits
Equity participation in a growing healthcare technology company
PTO and a culture that respects it
A collaborative, mission-driven environment where your work directly supports family caregivers and improves outcomes for people living with dementia