Sr. GRC Analyst · Remote

About the Company

Aya Healthcare is a rapidly growing workforce solutions provider in the healthcare industry, delivering tech-enabled services to help organizations manage their contingent labor needs. The company emphasizes employee satisfaction and innovative problem-solving.

Responsibilities

• Own assigned GRC projects and compliance deliverables
• Support the operation and continuous improvement of Aya’s enterprise GRC program
• Design and improve scalable workflows for compliance activities
• Support compliance efforts for SOC 2 and ISO/IEC 27001:2022
• Conduct control reviews, risk assessments, and compliance gap analyses
• Build and maintain dashboards and reports on compliance status
• Collaborate with cross-functional teams to resolve compliance issues

Requirements

• 4+ years of experience in Governance, Risk, and Compliance, Information Security, IT Audit, or a related discipline
• Hands-on experience operating or configuring GRC tools such as ServiceNow GRC / IRM
• Strong working knowledge of SOC 2 or ISO/IEC 27001:2022
• Familiarity with HIPAA and other healthcare-related compliance requirements preferred
• Bachelor’s degree in IT / CS preferred
• CISA, CISSP, CCSP, ISO 27001 credential, or another relevant security or compliance certification preferred

Skills & Tools

Benefits

• Free premium medical, dental, life, and vision insurance
• Generous 401(k) match
• Paid sick leave in accordance with applicable laws
• Unlimited DTO (time off)
• Company-sponsored virtual events and team-building activities

Additional Information

This role is remote and will work PST business hours.