GRC Senior Analyst at Flatiron Health

Are you passionate about using your skills to help transform the future of oncology? We are building a modern, connected ecosystem for cancer care, and we invite you to join our community. We value integrity and growth, and we are looking for someone who wants to make a meaningful impact by helping us learn from the experiences of every person fighting cancer.

What you bring

As a GRC Senior Analyst, you will play a vital role in our Engineering and Security teams. This is a full-time, hybrid position based in the United States. You will be responsible for maturing our risk management strategy and ensuring our systems remain secure while we innovate. Your core responsibilities will include:

• Leading our security risk management initiatives and driving the strategic roadmap for the function.
• Developing and delivering essential security metrics and risk indicators to help our stakeholders make informed, data-driven business decisions.
• Managing our security Plan of Action and Exception processes while performing risk-based analysis on vendors and new projects.

Requirements

We are looking for a collaborative problem-solver who takes pride in managing security risks within a fast-paced enterprise. You should have at least 6 years of experience in security risk management, third-party assessments, and audit oversight for frameworks like SOC2, NIST 800-53, or ISO. You must be fluent in English and possess excellent communication skills to translate complex security needs into clear business requirements. The ideal candidate is highly organized, adaptable to ambiguous situations, and deeply committed to our mission in the healthcare space. Experience with HIPAA is considered a significant plus.

What we offer

We believe in supporting our team members through a flexible work environment that balances professional collaboration with personal time. Our benefits include:

• Hybrid work arrangements that allow for a blend of remote and in-office collaboration.

How to Apply

If you are ready to apply your expertise to help us protect our patients and improve lives, we would love to hear from you. Please reach out to our team to start the conversation and learn more about how you can contribute to our mission.