Senior Analyst, Regulatory Affairs responsible for regulatory strategy and compliance within AES. Collaborating with various stakeholders to ensure RTO/ISO compliance and market strategies.
About the role
- Governance Risk and Compliance Engineer at Ro, a telehealth company. Focus on risk management, compliance frameworks, and automation with AI.
Responsibilities
- Serve as both a risk practitioner and automation engineer. Automate everything.
- Own and maintain the compliance platform (Vanta), including control mapping, evidence collection, continuous monitoring, and audit workflows
- Perform risk assessments, vendor security reviews, and control gap analyses, and track remediation through to completion
- Manage control documentation, policies, procedures, and supporting artifacts across multiple compliance frameworks
- Partner with Security, IT, Infrastructure, and Engineering teams to ensure technical and administrative controls align with documented policies and compliance requirements
- Support internal and external audits (SOC 2, HIPAA, HITRUST)
- Own and maintain the cyber risk register, collaborating with risk owners to quantify risks and develop remediation plans.
- Develop and maintain risk reporting, metrics, and executive summaries with BI tools (Looker, Hex, etc)
Requirements
- 5+ years of combined experience across governance, risk, compliance, security engineering, or adjacent technical roles, including hands-on experience working with compliance frameworks such as SOC 2, HIPAA, HITRUST, NIST, and PCI in modern, technology-driven environments.
- 3+ years of experience with ongoing compliance operations, with demonstrated progression from manual evidence collection to automated, continuously monitored controls.
- 2+ years of hands-on experience implementing and administering continuous compliance and evidence automation platforms (e.g., Vanta, Drata, SecureFrame), including configuring and creating custom integrations as well as optimizing automated evidence workflows.
- Working knowledge of cloud computing platforms (AWS, Azure, GCP) and how their native services and configurations support security and compliance requirements.
- Expertise in using Looker (or similar BI tool; HEX) to create dashboards, generate reports, and visualize GRC data for stakeholders, with a focus on simplifying complex data into actionable insights.
- Ability to automate data ingestion, transformation, and reporting using scripting or programmatic approaches (e.g., Python, JavaScript, APIs, Tines.)
- Strong analytical and root cause analysis skills
- Kindness, and an ability to communicate to all levels of the organization
Benefits
- Full medical, dental, and vision insurance + OneMedical membership
- Healthcare and Dependent Care FSA
- 401(k) with company match
- Flexible PTO
- Wellbeing + Learning & Growth reimbursements
- Paid parental leave + Fertility benefits
- Pet insurance
- Student loan refinancing
- Virtual resources for mindfulness, counseling, and fitness
Job title
Job type
Experience level
Salary
Degree requirement
Tech skills
Location requirements
Join LegalVision as a motivated lawyer (2 - 4 PQE) in the Commercial and Regulatory Practice. Work with NDIS providers and healthcare organizations to navigate complex regulatory requirements.
Director managing IT security strategies and policies for Abbott. Overseeing IT security functions and implementation of company - wide policies in a healthcare leadership role.
Join Rockwell Automation as an Analyst ensuring import/export compliance. Focus on regulations, documentation, and shipment monitoring in a hybrid environment.
Analista de Assuntos Regulatórios supporting regulatory strategies for multinational pharmaceutical company. Involves management of drug registration processes and performance monitoring in São Paulo.
Compliance Specialist working at Freetrade to help meet regulatory requirements and support product development. Engaging with teams across the business and delivering training and reporting solutions.
Manager of Regulatory Affairs & Public Policy at Rowan Digital Infrastructure shaping communications and strategies. Leading advocacy in the evolving regulatory landscape for data centers.
Compliance Specialist supporting various Compliance initiatives and ensuring regulatory adherence in healthcare. Reporting to the Compliance Manager and collaborating with internal departments on compliance - related projects.
Air Compliance Manager developing safety programs and conducting risk assessments at a global logistics leader. Ensuring compliance with regulations and maintaining staff certifications.
Senior Consultant in Cybersecurity advising clients on EU cyber and digital compliance requirements. Collaborating with a team of experts to implement regulatory frameworks and solutions.