Charlie Health · 2 days ago

Governance and Risk Analyst

United States

Full-time

Remote

Mid Level

2+ years exp

Wonder how qualified you are to the job?

Maximize your interview chances

Health Care

Insider Connection @Charlie Health

Discover valuable connections within the company who might provide insights and potential referrals, giving your job application an inside edge.

Responsibilities

Conduct regular business process and technology reviews to identify and address any policy, procedure or compliance gaps.

Collaborate with cross-functional teams to assess and identify potential risks to the organization.

Support in developing risk mitigation strategies and action plans.

Maintain accurate and up-to-date documentation of compliance activities, risk assessments, governance processes and risk mitigation initiatives.

Prepare periodic reports for management summarizing key compliance and risk metrics.

Contribute to the development and delivery of training programs to enhance awareness of compliance and risk management principles across the organization.

Assist in the design and implementation of internal controls to ensure the integrity of governance processes.

Conduct periodic testing and assessments of internal controls.

Work closely with other departments to understand their specific compliance and risk management needs.

Participate in cross-functional teams to address compliance-related issues.

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

GRCSecurity AuditorGRC software toolsCertified in RiskInformation Systems Control (CRISC)Certified Information Systems Auditor (CISA)CISSPCEHCSSLP

Required

Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent experience).

2-4 years experience in a GRC role, Security auditor or equivalent

Preferred

Familiarity with GRC software tools preferred.

Relevant certifications preferred (e.g., Certified in Risk and Information Systems Control (CRISC), Certified Information Systems Auditor (CISA), etc.)

Relevant certifications such as CISSP, CEH, or CSSLP are a plus.