GRC Analyst Project Manager

We are partnering with a growing organization seeking an experienced GRC Analyst with a strong background in HITRUST assessments and compliance management. This role will support security and compliance initiatives, with a heavy focus on HITRUST assessments, risk management, and cybersecurity governance activities.

Responsibilities

• Support and perform HITRUST assessment activities, including readiness, validated, and certification assessments.
• Work directly within the HITRUST MyCSF platform to document controls, collect evidence, and manage assessment workflows.
• Evaluate security controls and compliance requirements against the HITRUST CSF framework.
• Partner with internal stakeholders to identify compliance gaps and remediation activities.
• Assist with risk assessments, audit preparation, and ongoing compliance initiatives.
• Maintain documentation related to cybersecurity, governance, risk, and compliance programs.
• Support regulatory and industry framework initiatives, including HIPAA, NIST, SOC, and related standards.

Approximately 3+ years of hands-on experience performing HITRUST assessments. Active HITRUST CCSFP (Certified CSF Practitioner) certification preferred. Direct experience working for a HITRUST Authorized External Assessor firm strongly preferred. Experience utilizing HITRUST MyCSF and supporting validated HITRUST assessments. Strong understanding of cybersecurity governance, risk management, and compliance principles. Experience working within consulting, public accounting, cybersecurity consulting, or assessment environments. Excellent communication, documentation, and stakeholder management skills.

Key Skills

• HITRUST CSF
• MyCSF
• CCSFP
• Risk Assessments
• Security Compliance
• Cybersecurity Governance
• Internal Controls
• Audit & Compliance
• HIPAA
• NIST