Sr. GRC Analyst - Internal Governance at Garner Health · LumiJobs

Responsibilities

We are looking for a Senior GRC Analyst to join our Technical Compliance team and own the recurring risk, vendor, findings, and governance work that keeps Garner’s security program operating well between audits. You will run our risk risk register, manage third party risk, drive security findings to resolution, deliver security training and run the operating cadence of our security governance program. You will partner with all departments across the company so that risks are identified early, decisions are made deliberately, and remediation actually gets done. Our Technology Compliance team safeguards Garner’s sensitive healthcare data and protects the trust of our members, clients, and partners by maintaining a strong control environment and regulatory compliance. The work you do here has a direct impact on our ability to win and retain enterprise customers, expand into new lines of business, and scale securely as we grow.
Where you will work:
This role is open to remote candidates across the U.S. For candidates based in New York City, the position follows a hybrid schedule with in-office work required Tuesday, Wednesday, and Thursday each week.
Own Garner’s annual information security risk assessment and risk register, driving risk identification, scoring, treatment, and reporting
Manage risk exceptions and prepare risk acceptances for leadership decision
Run third party and vendor risk reviews from intake through approval and periodic reassessment
Own security findings from vulnerability scanning, penetration tests, audits, client assessments, and incidents, tracking remediation with Engineering, enforcing SLAs, and escalating findings that warrant a risk decision
Run our security and compliance training program, including annual security awareness and HIPAA training, onboarding, content refreshes, and completion tracking
Manage the maintenance of our compliance policies, standards, and procedures
Report on our compliance posture to senior leadership
Scale our GRC function with AI and automation, building quick wins and scoping requirements for Engineering to fully automate the rest
What you will bring to the team:

Sr. GRC Analyst - Internal Governance

Responsibilities

Benefits

Company

Garner Health

More roles at Garner Health