Sr. GRC Analyst

A senior GRC analyst in Aya Healthcare's security organisation, reporting to the Manager, Governance, Risk & Compliance, who helps run and mature the company's GRC program with a focus on automating compliance work.

The analyst owns GRC projects end to end, supports SOC 2 and ISO 27001 audits, designs controls and evidence requirements, runs risk assessments and gap analyses, tracks remediation, builds dashboards in ServiceNow GRC / IRM, answers customer security questionnaires and guides junior analysts. Aya wants four or more years in GRC, security or IT audit, hands-on use of a GRC platform such as ServiceNow, Drata or Vanta, and solid SOC 2 or ISO 27001 knowledge; HIPAA and CISA or CISSP are preferred. Remote, working Pacific business hours.