Conduct comprehensive vendor and application risk assessments, including evaluations of emerging technologies.
Maintain and update the organizational risk register, including rigorous analysis, documentation, and evidence tracking.
Manage the intake process, coordinate documentation, and handle follow-ups to ensure operational continuity.
Assist with broader governance initiatives and provide support for the Data Loss Prevention (DLP) program.
Ensure all activities align with HIPAA and other relevant healthcare regulatory requirements.
Prepare clear, actionable reports and dashboards for key stakeholders.

3–5 years of dedicated experience in GRC, IT Risk, or Compliance.
Strong understanding of IT/Security controls and experience with GRC tools (e.g., Archer, ServiceNow, OneTrust, ZenGRC).
Deep familiarity with HIPAA and healthcare-specific compliance challenges.
Proven ability to manage a risk register and conduct assessments independently.
Ability to work onsite in the Bellaire area every Tuesday.

GRC Support

Key skills