Compliance & Audit Analyst, EvolutionIQ

• The ideal person will bring a sharp analytical mindset, excellent organizational skills, and a proactive approach to problem-solving and process improvement
• Bachelor’s degree and 3+ years of experience in compliance, audit, risk management, or a related area. (In lieu of degree 5+ years is acceptable)
• Experience working in a tech or software company is strongly preferred
• Working knowledge of cybersecurity standards and frameworks such as ISO/IEC 27001/ISO 27002, NIST, HITRUST and SOC2 and have a working understanding of laws and regulations associated with information security and privacy such as HIPAA, CCPA, GDPR, PCI, etc
• Work in tandem with the CSO to perform ongoing internal security program assessments and ensure that HITRUST and SOC2 certification controls are maintained by their owners
• Experienced with and comfortable working in a GRC tool like Vanta or Drata, as well as configuring and maintaining it
• Work in tandem with the CSO to accurately provision Customer and Third-Party Security Compliance Assessments on a timely basis
• Analyze findings, document, recommend and report program gaps to security leadership
• Experience with auditing Google Workspace and Google Cloud is a very big plus
• Keen attention to detail and the ability to manage multiple priorities and deadlines with a proactive and solution-oriented mindset is needed
• Excellent written and verbal communication skills, with the ability to communicate effectively with both technical and non-technical audiences at various levels within the organization
• A self-starter who takes initiative and can work independently with the appropriate level of support
• Someone who thrives in a fast-paced, evolving environment and is eager to learn and grow their knowledge in a well mentored team
• A team player who can collaborate effectively across departments and functions

• We are seeking a proactive and detail-oriented Compliance & Audit Analyst to join our Security team and will report to the Chief Security Officer
• This role will be instrumental in ensuring our operations remain compliant with internal policies, industry regulations, audit standards, and to help maintain our certifications
• Support the development, implementation, and maintenance of compliance programs and internal audit processes
• Conduct regular audits and risk assessments across various departments to ensure adherence to internal policies and regulatory requirements
• Collaborate with cross-functional teams to identify compliance gaps and recommend practical solutions
• Prepare and present reports on audit findings, including risk areas and corrective action plans
• Maintain accurate documentation and records related to audits, risk assessments, and compliance activities
• Stay up-to-date with changes in regulatory requirements and industry best practices
• Assist with vendor risk management, data protection reviews, and third-party compliance checks
• Promote a culture of compliance and integrity throughout the organization

• Premium Medical Insurance Plan – Empire Blue Cross Blue Shield Medical insurance
• 401K with employer matching
• Dental Coverage – Principal Financial
• Life insurance / ACDC coverage – Reliance Standard
• Vision – Reliance Standard
• Short Term and Long Term Disability – Unum
• Employee stock option plan
• $500 to get you started setting up your home office and $200 every year for upgrades after that

Total funding: $60.4m

EvolutionIQ is a data-driven claim guidance platform for insurance providers. Its products combine structured and unstructured claim data with external third party data to provide powerful claim guidance, in an attempt to modernize the claims operations process.