Governance, Risk, and Compliance (GRC) Analyst

TigerConnect transforms healthcare with the industry’s most widely adopted clinical collaboration platform – uniquely modernizing the way doctors, nurses, care teams, patients, and data connect. With solutions spanning care team communication, scheduling automation, alarm management and event notifications, nurse call, patient engagement and more, we accelerate productivity, reduce costs, and improve patient outcomes, safely and securely. More than 8,000 healthcare organizations trust us to deliver enterprise-ready solutions, making this possible with the right group of dedicated, thoughtful trailblazers. Today, private practice doctor’s offices, small and large hospice centers, and some of the largest healthcare organizations in the United States rely on TigerConnect. We’re a fun, hungry, smart, innovative group of eclectic people who are passionate about transforming the way clinical care teams work and communicate.   

We are seeking a dedicated GRC Analyst to join our team, where you will be instrumental in upholding our commitment to excellence in security, compliance, and risk management. In this role, you will support the continuous improvement of our security frameworks and governance practices, ensuring that our operations consistently meet regulatory requirements while effectively managing risk. Your work will drive policy adherence, safeguard our processes, and help build trust with our customers by demonstrating our commitment to industry standards. If you have a keen eye for detail, a passion for compliance, and the ability to communicate complex findings across multiple stakeholders, you will thrive in this dynamic and impactful role. 
 
What You’ll Be Doing:  

• Assist in the creation and rollout of governance frameworks and policies to bolster organizational security and compliance. 

• Regularly review current practices, conduct thorough assessments, and recommend strategic improvements to enhance overall governance. 

• Collaborate in IT governance and compliance audits by ensuring processes are aligned with industry standards, and manage evidence collection and documentation. 

• Conduct risk assessments to proactively identify potential compliance issues and develop actionable mitigation strategies. 

• Stay informed on relevant industry standards and regulations (such as FDA, CCPA, HIPAA, HITRUST) to continuously support and refine compliance efforts. 

• Respond to customer inquiries and manage security-related questionnaires, providing detailed and accurate insights into the company's security programs and practices. 

• Oversee security governance gap remediation and ensure consistent monitoring of security controls across the organization. 

What You Bring:  

• A Bachelor’s degree is preferred but not required if you have compensating relevant experience.  

• At least 3 years of experience in Information Security, IT controls, compliance, assessments, audit, or general IT—with a minimum of 2 years focused specifically on security—is essential. 

• Strong working knowledge of security frameworks including HITRUST CSF, NIST CSF, ISO 27001, and FDA 510K. 

• Experience managing customer and vendor security questionnaires to effectively communicate security postures. 

• Excellent critical thinking, problem-solving, and communication skills, with the ability to translate complex technical findings for various stakeholders. 

• Hands-on experience with IT control testing, managing the audit lifecycle, and implementing risk mitigation strategies. 

• Proficiency in using GRC tools for compliance reporting and audit process management. 

• Exceptional organizational capabilities to balance multiple priorities with minimal supervision. 

• Professional certifications such as CISSP, CISA, CISM, CPA/CA, or equivalent are considered a plus.