Garner Health - Sr. GRC Analyst

• This role is open to remote candidates across the U.S. For candidates based in New York City, the position follows a hybrid schedule with in-office work required Tuesday, Wednesday, and Thursday each week. • Manage and support our compliance certifications, including SOC 2, HITRUST, and ISO 27001 audits and run control testing across the audit lifecycle • Serve as the subject matter expert across the company on our compliance frameworks • Serve as the primary point of contact for external auditors and assessors • Manage Garner’s Security and Privacy trust center • Maintain the risk register and drive risk identification, scoring, and reporting • Manage the maintenance of our compliance policies, standards, and procedures • Report on our compliance posture to senior leadership • Scale our GRC function with AI and automation, building quick wins and scoping requirements for Engineering to fully automate the rest • 5+ years of experience in GRC, IT audit, or information security compliance • Prior experience with HITRUST, SOC 2, and ISO 27001 audits • Hands-on experience with control design, evidence collection, and remediation in a cloud-native engineering environment • Proven ability to adapt your communication style across engineers, operators, and executives • A GRC Engineering mindset with prior experience using scripting and LLMs to automate repetitive tasks • A desire to be a part of a high-performing, mission-driven team that operates with intense urgency, a strong sense of individual accountability, and a commitment to authentic feedback • Industry certifications such as CISA, CISM, CISSP, CRISC, or ISO 27001 Lead Auditor preferred • Technologies we use: • AWS, Okta, Datadog, Retool, Gitlab, Vanta, Claude • Please note: we are unable to sponsor or take over sponsorship of an employment visa at this time.