GRC Analyst

Not Interested
Bookmark
Report This Job

profile Job Location:

Boca Raton, FL - USA

profile Monthly Salary: Not Disclosed
Posted on: 30+ days ago
Vacancies: 1 Vacancy

Job Summary

We are united in our mission to make a positive impact on healthcare. Join Us!

  • South Florida Business Journal Best Places to Work 2024
  • Inc. 5000 Fastest-Growing Private Companies in America 2024
  • 2024 Black Book Awards ranked #1 EHR in 11 Specialties
  • 2024 Spring Digital Health Awards Web-based Digital Health category for EMA Health Records (Gold)
  • 2024 Stevie American Business Award (Silver) New Product and Service: Health Technology Solution (Klara)

Who we are:

We Are Modernizing Medicine (WAMM)! Were a team of bright passionate and positive problem-solvers on a mission to place doctors and patients at the center of care through an intelligent specialty-specific cloud platform. Our vision is a world where the software we build increases medical practice success and improves patient outcomes. Founded in 2010 by Daniel Cane and Dr. Michael Sherling we have grown to over 3400 combined direct and contingent team members serving eleven specialties and we are just getting started! ModMeds global headquarters is based in Boca Raton FL with a growing office in Hyderabad India and a robust remote workforce across the US Chile and Germany.

ModMed is hiring a driven GRC Analyst (Governance Risk and Compliance) Analyst to support the development and implementation of GRC strategies within ModMed. This role will ensure that ModMed adheres to regulatory requirements industry standards and best practices for cybersecurity. The ideal candidate will have a strong understanding of GRC frameworks experience in riskassessment and management and the ability to collaborate across various departments to enhance our security posture.

Your Role:

Governance

  • Develop and maintain cybersecurity policies procedures and standards.
  • Ensure alignment of cybersecurity practices with business objectives and regulatory requirements.
  • Assist in the creation and management of the cybersecurity governance framework.

Risk Management

  • Conduct risk assessments on third parties to identify and evaluate potential cybersecurity risks.
  • Develop and implement risk mitigation strategies and controls.
  • Monitor and report on risk management activities and the effectiveness of controls.

Compliance

  • Ensure compliance with industry regulations and standards (PCI HIPAA SOC2).
  • Conduct regular audits and assessments to ensure adherence to compliance requirements.
  • Collaborate with internal and external auditors during compliance reviews and audits.

Security Awareness & Training

  • Develop and deliver cybersecurity awareness training materials.
  • Promote a culture of cybersecurity awareness across the organization.
  • Monitor and report on the effectiveness of security awareness initiatives.

Reporting & Documentation

  • Prepare regular reports on GRC activities and metrics for senior security management.
  • Maintain comprehensive documentation of all GRC activities policies and procedures.
  • Ensure proper documentation of risk assessments audit findings and compliance activities.

Skills & Requirements:

  • Bachelors degree in Information Security Cybersecurity or Information Technology or equivalent education and experience.
  • Minimum of 3-5 years of experience in informationsecurity GRC or related fields.
  • Experience with PCI HIPAA SOC2 CISControls and riskmanagement enterprise security riskmanagement.
  • Familiarity with healthcare industry regulations and standards is a plus.
  • Proficiency in PCI and securityrisk assessments methodologies and tools.
  • Excellent problem-solving skills.
  • Strong communication andinterpersonal skills.
  • Strong understanding of securityframeworks andstandards (NIST CSFPCI HIPAA SOC2CIS Controls).
  • Experience with GRC tools and technologies PCIP ISA CISA Certification.

#LI-DV1

ModMed Benefits Highlight: At ModMed we believe its important to offer a competitive benefits package designed to meet the diverse needs of our growing workforce. Eligible Modernizers can enroll in a wide range of benefits:

India

  • Meals & Snacks: Enjoy complimentary office lunches & dinners on select days and healthy snacks delivered to your desk
  • Insurance Coverage: Comprehensive health accidental and life insurance plans including coverage for family members all at no cost to employees
  • Allowances: Annual wellness allowance to support your well-being and productivity
  • Earned casual and sick leaves to maintain a healthy work-life balance
  • Bereavement leave for difficult times and extended medical leave options
  • Paid parental leaves including maternity paternity adoption surrogacy and abortion leave
  • Celebration leave to make your special day even more memorable and company-paid holidays to recharge and unwind.

United States

  • Comprehensive medical dental and vision benefits
  • 401(k): ModMed provides a matching contribution each payday of 50% of your contribution deferred on up to 6% of your compensation. After one year of employment with ModMed 100% of any matching contribution you receive is yours to keep.
  • Generous Paid Time Off and Paid Parental Leave programs
  • Company paid Life and Disability benefits Flexible Spending Account and Employee Assistance Programs
  • Company-sponsored Business Resource & Special Interest Groups that provide engaged and supportive communities within ModMed
  • Professional development opportunities including tuition reimbursement programs and unlimited access to LinkedIn Learning
  • Global presence and in-person collaboration opportunities; dog-friendly HQ (US) Hybrid office-based roles and remote availability for some roles
  • Weekly catered breakfast and lunch treadmill workstations Zen and wellness rooms within our BRIC headquarters.

PHISHING SCAM WARNING:ModMed is among several companies recently made aware of a phishing scam involving imposters posing as hiring managers recruiting via email text and social media. The imposters are creating misleading email accounts conducting remote interviews and making fake job offers in order to collect personal and financial information from unsuspecting individuals. Please be aware that no job offers will be made from ModMed without a formal interview process and valid communications from our hiring team will come from our employees with a ModMed email address (). Please check senders email addresses carefully. Additionally ModMed will not ask you to purchase equipment or supplies as part of your onboarding process. If you are receiving communications as described above please report them to the FTC website.


Required Experience:

IC

We are united in our mission to make a positive impact on healthcare. Join Us!South Florida Business Journal Best Places to Work 2024Inc. 5000 Fastest-Growing Private Companies in America 20242024 Black Book Awards ranked #1 EHR in 11 Specialties2024 Spring Digital Health Awards Web-based Digital He...
View more view more

Key Skills

  • ArcGIS
  • Intelligence Community Experience
  • GIS
  • Python
  • Computer Networking
  • Data Collection
  • Intelligence Experience
  • R
  • Relational Databases
  • Analysis Skills
  • Data Management
  • Application Development

About Company

Company Logo

Improve efficiency and treatment outcomes with Modernizing Medicine's specialty-specific EHR systems and healthcare suites built by specialty physicians.

View Profile View Profile