Apply on Employer Site

Caris Life Sciences · 10 hours ago

GRC Analyst – Enterprise & Third Party Risk

Irving, TX

Full-time

Hybrid

Mid Level

4+ years exp

Caris Life Sciences is transforming cancer care through precision medicine and innovative healthcare solutions. The GRC Analyst – Enterprise & Third Party Risk will support internal risk assessments and manage third-party risk activities, ensuring effective governance and compliance across the organization.

Artificial Intelligence (AI)BiopharmaBiotechnologyHealth CareLife Science

Responsibilities

Conduct internal risk assessments across business units, systems, applications and processes to identify potential security, operational, and compliance risks

Develop and maintain the internal risk register and facilitate periodic risk reviews with control owners and business stakeholders

Evaluate risk exception requests, perform risk-based analysis, and ensure appropriate documentation, approval, and tracking

Lead and support third-party risk management activities including vendor due diligence, risk assessments, contract reviews, and ongoing monitoring

Partner with procurement, legal, and business stakeholders to embed security and risk requirements into vendor lifecycle processes

Assist in defining and maintaining IT and organizational policies, standards, and procedures related to security, risk, and compliance

Support internal and external audits (e.g., HIPAA, SOX, GDPR) by collecting evidence and addressing audit findings and recommendations

Collaborate with IT and business teams to assess the adequacy and effectiveness of internal controls and drive remediation efforts

Conduct periodic gap assessments and ensure controls are maintained to support ongoing compliance

Stay abreast of changes in regulatory requirements and industry best practices related to risk management, third-party governance, and cybersecurity

Qualification

Information Security Risk ManagementThird-Party Risk ManagementGRC FunctionsInternal Control AssessmentsRegulatory Compliance StandardsSecurity Risk FrameworksHealthcare Industry ExperienceIndustry CertificationsGRC Platforms ExperienceCommunication SkillsCollaboration Skills