Senior GRC Analyst

Garner Health

Senior GRC Analyst ensuring compliance across security frameworks such as ISO 27001 and SOC 2. Join Garner Health in transforming the healthcare economy with data-driven insights.

Posted 6/29/2026full-timeNew York City • New York • 🇺🇸 United StatesSenior💰 $132,000 - $165,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in compliance frameworks such as SOC 2, HITRUST, and ISO 27001, with a strong focus on risk management and automation in GRC functions. Proven ability to communicate effectively across technical and executive teams while driving compliance initiatives.

Highest-signal resume keywords

GRC ManagementSOC 2 Audit ExperienceHITRUST ComplianceISO 27001 CertificationRisk Identification and Reporting

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Control DesignEvidence CollectionRemediationCloud-Native EngineeringScriptingAutomation

Soft Skills

Adaptable CommunicationTeam AccountabilityFeedback Commitment

Tools & Technologies

GRC ToolsAI Automation

Certifications & Qualifications

CISACISMCISSPCRISCISO 27001 Lead Auditor

Industry Keywords

Compliance CertificationsRisk RegisterControl TestingAudit LifecycleSecurity and Privacy

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Manage and support our compliance certifications, including SOC 2, HITRUST, and ISO 27001 audits and run control testing across the audit lifecycle
Serve as the subject matter expert across the company on our compliance frameworks
Serve as the primary point of contact for external auditors and assessors
Manage Garner’s Security and Privacy trust center
Maintain the risk register and drive risk identification, scoring, and reporting
Manage the maintenance of our compliance policies, standards, and procedures
Report on our compliance posture to senior leadership
Scale our GRC function with AI and automation, building quick wins and scoping requirements for Engineering to fully automate the rest

Requirements

What you’ll need

5+ years of experience in GRC, IT audit, or information security compliance
Prior experience with HITRUST, SOC 2, and ISO 27001 audits
Hands-on experience with control design, evidence collection, and remediation in a cloud-native engineering environment
Proven ability to adapt your communication style across engineers, operators, and executives
A GRC Engineering mindset with prior experience using scripting and LLMs to automate repetitive tasks
Industry certifications such as CISA, CISM, CISSP, CRISC, or ISO 27001 Lead Auditor preferred
A desire to be a part of a high-performing, mission-driven team that operates with intense urgency, a strong sense of individual accountability, and a commitment to authentic feedback.

Benefits

Comp & perks

flexible PTO
Medical/Dental/Vision plan options
401(k)
Teladoc Health and more.