Sr. GRC Analyst - Internal Governance

Remote. Posted 9 days ago

The role

You will own recurring risk, vendor, findings, and governance work to maintain the security program. You will manage the risk register, third party risk, security findings, and security training.

What you will do

Own the annual information security risk assessment and risk register
Manage risk exceptions and prepare risk acceptances for leadership decision
Run third party and vendor risk reviews
Own security findings from vulnerability scanning, penetration tests, audits, client assessments, and incidents
Run the security and compliance training program
Manage the maintenance of compliance policies, standards, and procedures
Report on compliance posture to senior leadership
Scale the GRC function with AI and automation

Required qualifications

5+ years of experience in GRC, IT risk management, third party risk management, or information security compliance
Experience running information security risk assessments and maintaining a risk register using established methodologies such as NIST CSF or ISO 27005
Hands on experience with vendor risk management and with vulnerability or findings remediation programs in a cloud native engineering environment
Working knowledge of HIPAA and of SOC 2, ISO 27001, and HITRUST requirements
A track record of driving accountability across teams you don’t manage
Ability to adapt communication style across engineers, operators, and executives
A GRC Engineering mindset with prior experience using scripting and LLMs to automate repetitive tasks

Nice to have

CISA
CISM
CISSP
CRISC
ISO 27001 Lead Auditor

Benefits

Equity incentive
Flexible PTO
Medical/Dental/Vision plan options
401(k) with company match
Flexible spending accounts
Teladoc Health

Before you apply

Unable to sponsor or take over sponsorship of an employment visa at this time

About the company

Garner is on a mission to transform the U.S. healthcare system by partnering with employers to redesign how healthcare works. They use proprietary clinical metrics and AI to identify best-performing doctors and steer members to higher-quality care.