InfoSec GRC Analyst

ExamWorks

. Assess, implement, manage, and document security controls supporting ExamWorks and subsidiaries’ information security strategy and compliance requirements .

Posted 9/24/2026full-timeRemote • United StatesMid-LevelSenior💰 $60,000 - $90,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in IT security, risk management, and compliance, with a strong focus on implementing security controls and facilitating audits. Proficient in articulating security policies and conducting vendor risk assessments while ensuring adherence to industry standards.

Highest-signal resume keywords

IT Security ManagementRisk AssessmentCompliance Frameworks (SOX, PCI, SOC, NIST, ISO 27001, HITRUST, HIPAA)Audit CoordinationSecurity Policy Development

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security Controls ImplementationVulnerability DetectionIntrusion DetectionRisk ManagementCompliance AuditingTechnical Controls ConfigurationData Collection for AuditsException RemediationSecurity Standards TestingCross-Training Facilitation

Soft Skills

Excellent Written CommunicationExcellent Verbal Communication

Industry Keywords

HITRUSTSOC2NISTISO 27001HIPAAHITECHVendor Risk AssessmentSecurity Program AdvocacyIT Security PoliciesCompliance Requirements

About the role

Key responsibilities & impact

Assess, implement, manage, and document security controls supporting ExamWorks and subsidiaries’ information security strategy and compliance requirements
Advocate for an effective security program, including system-wide security analysis, intrusion and vulnerability detection, standards and testing, risk assessment, awareness and education, and policy, standard, and procedure development
Facilitate HITRUST and SOC2 audit engagements, data/artifact collection, exception remediation, and monitoring
Respond to client assessments and RFPs
Conduct vendor risk assessments and reassessments
Conduct or participate in cross-training sessions with the IT Security team on management and configuration of security tools and technical controls

Requirements

What you’ll need

College Degree in Computer Science or related field
5 years in IT security, risk management, compliance, and audit
Subject matter expert knowledge and experience on compliance and security framework standards such as SOX, PCI, SOC, NIST, ISO 27001, HITRUST, HIPAA and HITECH
Experience with coordination of compliance audit processes and IT security risk assessment programs
Capable of articulating general IT security policies, processes, and technical controls
Ability to provide insights in controls design, implementation, and deficiency remediation
Excellent written and verbal communication skills
Ability to work a regular Monday–Friday standard business hours schedule
Willingness to travel up to 10%

Benefits

Comp & perks

Medical insurance
Vision insurance
Dental insurance
Paid time off
401k
Competitive benefits
Optional work from home