Senior Governance, Risk, and Compliance Analyst, Ro

• 5 years’ experience working with risk and compliance frameworks (HIPAA, NIST, HITRUST, SOC2, PCI)
• 3 years of demonstrated success in audit readiness activities
• Understanding of digital eCommerce platforms, electronic health records (EHR) systems, and traditional business-enabling IT services
• Knowledge of cloud computing platforms (e.g., Amazon Web Services, Microsoft Azure, Google Cloud) and their security and compliance features
• Experience with automated, continuous compliance tools such as Vanta, Drata or Tugboat
• Expertise in using Looker (or similar BI tool) to create dashboards, generate reports, and visualize GRC data for stakeholders, with a focus on simplifying complex data into actionable insights
• Ability to automate data ingestion, transformation, and reporting processes using scripting languages such as Python or JavaScript, particularly for integrating and managing data from APIs
• Strong analytical and root cause analysis skills
• Demonstrated the ability to operate with fortitude and finesse while navigating compliance topics with stakeholders
• Kindness, and an ability to communicate to all levels of the organization

Desirable

• The Governance Risk and Compliance Sr. Analyst role will be a core member of Ro’s GRC team
• The GRC team enables Ro to manage risk by vigorously assessing our operations against leading compliance frameworks and standing legislation
• This individual contributor role will be a key player leading audit readiness program and other key risk initiatives
• Lead Audit Readiness program, overseeing and driving Ro’s audit readiness initiatives for both internal and external audits, ensuring full preparation and alignment with compliance requirements
• Own and maintain the cyber risk register, collaborating with risk owners to quantify risks and develop remediation plans
• Own Ro’s security and privacy policy program
• Develop and lead a risk and privacy analytics program that provides business context, supporting informed decision-making
• Performing vendor risk assessments