InfoSec GRC Analyst

ExamWorks

. Assess, implement, manage, and document security controls supporting ExamWorks and subsidiaries' information security strategy and compliance requirements .

Posted 9/24/2026full-timeRemote • United StatesMid-LevelSenior💰 $60,000 - $90,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in IT security, risk management, and compliance, with a strong focus on frameworks such as SOX, PCI, SOC, NIST, ISO 27001, HITRUST, HIPAA, and HITECH. Proven ability to manage security controls, facilitate audits, and communicate effectively with stakeholders.

Highest-signal resume keywords

IT Security ManagementRisk AssessmentCompliance AuditingHITRUST CertificationSOC 2 Compliance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk ManagementComplianceSecurity Controls ImplementationVulnerability DetectionPolicy DevelopmentAudit CoordinationTechnical Controls ManagementData CollectionException RemediationSecurity Frameworks

Soft Skills

Excellent Communication SkillsCross-Training Facilitation

Industry Keywords

SOXPCISOCNISTISO 27001HITRUSTHIPAAHITECHSecurity AnalysisClient Assessments

About the role

Key responsibilities & impact

Assess, implement, manage, and document security controls supporting ExamWorks and subsidiaries' information security strategy and compliance requirements
Advocate for an effective security program, including system-wide security analysis, intrusion and vulnerability detection, standards and testing, risk assessment, awareness and education, and policy, standard, and procedure development
Facilitate HITRUST and SOC 2 audit engagements, including data/artifact collection, exception remediation, and monitoring
Respond to client assessments and RFPs
Conduct vendor risk assessments and reassessments
Conduct or participate in cross-training with the IT Security team on management and configuration of security tools and technical controls

Requirements

What you’ll need

College Degree in Computer Science or related field
5 years in IT security, risk management, compliance, and audit
Subject matter expert knowledge and experience with SOX, PCI, SOC, NIST, ISO 27001, HITRUST, HIPAA, and HITECH compliance and security frameworks
Experience coordinating compliance audit processes and IT security risk assessment programs
Ability to articulate general IT security policies, processes, and technical controls
Ability to provide insights into controls design, implementation, and deficiency remediation
Excellent written and verbal communication skills

Benefits

Comp & perks

Medical insurance
Vision insurance
Dental insurance
Paid time off
401k
Optional work from home
Regular Monday–Friday standard business hours schedule