Sr. GRC Analyst

The role

A Senior GRC Analyst will manage compliance certifications and run internal audits. You will partner with Engineering, Product, People, and Legal teams to maintain controls across security frameworks.

What you will do

• Manage and support compliance certifications including SOC 2, HITRUST, and ISO 27001 audits
• Run control testing across the audit lifecycle
• Serve as the subject matter expert across the company on compliance frameworks
• Serve as the primary point of contact for external auditors and assessors
• Manage Garner’s Security and Privacy trust center
• Maintain the risk register and drive risk identification, scoring, and reporting
• Manage the maintenance of compliance policies, standards, and procedures
• Report on compliance posture to senior leadership
• Scale the GRC function with AI and automation

Required qualifications

• 5+ years of experience in GRC, IT audit, or information security compliance
• Prior experience with HITRUST, SOC 2, and ISO 27001 audits
• Hands-on experience with control design, evidence collection, and remediation in a cloud-native engineering environment
• Proven ability to adapt communication style across engineers, operators, and executives
• A GRC Engineering mindset with prior experience using scripting and LLMs to automate repetitive tasks

Nice to have

• CISA
• CISM
• CISSP
• CRISC
• ISO 27001 Lead Auditor

Benefits

• Equity incentive
• Flexible PTO
• Medical/Dental/Vision plan options
• 401(k)
• Teladoc Health

Before you apply

• Unable to sponsor or take over sponsorship of an employment visa at this time

About the company

Garner is on a mission to transform the U.S. healthcare system by partnering with employers to redesign how healthcare works. The company uses proprietary clinical metrics and AI to identify best-performing doctors and steer members to higher-quality care.