GRC Analyst

The role

The GRC Analyst supports governance, risk, and compliance programs. This person will identify and assess risk, ensure adherence to regulatory frameworks, and maintain internal policies and controls.

What you will do

• Conduct ongoing risk reviews and maintain an up-to-date risk register
• Support risk assessments across critical business processes and systems
• Partner with stakeholders to develop and track risk mitigation plans through resolution
• Assist in building risk metrics and reporting for executive-level visibility
• Monitor adherence to relevant regulatory frameworks and internal controls
• Support audit readiness by coordinating evidence collection and documentation
• Partner with cross-functional teams to ensure successful audit outcomes with no material findings
• Review and update GRC-related policies on a regular cadence
• Support or lead compliance and security training initiatives
• Develop and distribute awareness materials on key compliance topics

Required qualifications

• Bachelor’s degree in Business, Information Security, Risk Management, or related field (or equivalent experience)
• 3-5 years of experience in GRC, risk management, compliance, or audit-related roles
• Familiarity with common compliance frameworks (e.g., SOC 2, ISO 27001, HIPAA, FedRAMP)
• Strong organizational skills with attention to detail and follow-through
• Act as a highly collaborative partner across internal teams and external stakeholders

Nice to have

• GovRAMP, StateRAMP, or FedRAMP experience a plus
• Experience supporting audits or certification processes
• Exposure to risk management tools or GRC platforms
• Basic understanding of information security principles and controls
• Background in customer facing roles with a high level of customer interaction

Benefits

• Unlimited PTO policy
• Competitive medical, dental, and vision healthcare coverage
• 401k matching
• Paid holidays
• Volunteer time off
• Paid parental leave
• Remote work stipend

About the company

Radicle Health is a collection of human services software products designed to foster collaboration and innovation. The company builds mission-driven products that support organizations in delivering essential services.