SWORD Health
Governance, Risk & Compliance Analyst
SWORD Health, Myrtle Point, Oregon, United States, 97458
Employer Industry: Healthcare Technology
Why consider this job opportunity
Salary up to €70,000 per year
Opportunity for rapid salary adjustments based on performance and impact
Flexible working hours and the ability to work from home
Comprehensive benefits, including health, dental, and vision insurance
Discretionary vacation policy, along with a remote work allowance
Chance to work in a fast‑paced, innovative environment focused on AI‑driven healthcare solutions
What to Expect (Job Responsibilities)
Serve as the primary subject matter expert for security and compliance inquiries, managing responses to security questionnaires and RFPs
Take ownership of certification lifecycles, ensuring year‑round audit readiness and managing the certification process, including external audits
Collaborate with the GRC team to enhance existing programs and ensure robust mapping of controls to processes
Work with the Quality Assurance & Regulatory Affairs (QARA) team to align security frameworks with Medical Device Compliance initiatives
Partner with product teams to ensure security‑by‑design in new product developments and compliance integration
What is Required (Qualifications)
Minimum of 5 years of hands‑on experience in Governance, Risk, and Compliance (GRC), with a proven track record in leading audits and maintaining certifications
Experience with at least three recognized security frameworks such as ISO 27001, SOC 2, or HIPAA
Exceptional written and verbal communication skills in English, with the ability to convey complex security concepts clearly
Strong understanding of security controls applicable to Infrastructure and Product environments
Familiarity with Medical Device certifications and regulations, including ISO 13485
How to Stand Out (Preferred Qualifications)
Experience working across diverse teams, including Legal, Quality, and IT, to achieve compliance goals
Familiarity with cybersecurity and privacy/regulatory frameworks, such as GDPR and the AI Act
A proactive and adaptable mindset, capable of quickly learning new project contexts
Additional Information We prioritize candidate privacy and champion equal‑opportunity employment. Central to our mission is our partnership with companies that share this commitment. We aim to foster a fair, transparent, and secure hiring environment for all. If you encounter any employer not adhering to these principles, please bring it to our attention immediately. We are not the EOR (Employer of Record) for this position. Our role in this specific opportunity is to connect outstanding candidates with a top‑tier employer.
#J-18808-Ljbffr
Why consider this job opportunity
Salary up to €70,000 per year
Opportunity for rapid salary adjustments based on performance and impact
Flexible working hours and the ability to work from home
Comprehensive benefits, including health, dental, and vision insurance
Discretionary vacation policy, along with a remote work allowance
Chance to work in a fast‑paced, innovative environment focused on AI‑driven healthcare solutions
What to Expect (Job Responsibilities)
Serve as the primary subject matter expert for security and compliance inquiries, managing responses to security questionnaires and RFPs
Take ownership of certification lifecycles, ensuring year‑round audit readiness and managing the certification process, including external audits
Collaborate with the GRC team to enhance existing programs and ensure robust mapping of controls to processes
Work with the Quality Assurance & Regulatory Affairs (QARA) team to align security frameworks with Medical Device Compliance initiatives
Partner with product teams to ensure security‑by‑design in new product developments and compliance integration
What is Required (Qualifications)
Minimum of 5 years of hands‑on experience in Governance, Risk, and Compliance (GRC), with a proven track record in leading audits and maintaining certifications
Experience with at least three recognized security frameworks such as ISO 27001, SOC 2, or HIPAA
Exceptional written and verbal communication skills in English, with the ability to convey complex security concepts clearly
Strong understanding of security controls applicable to Infrastructure and Product environments
Familiarity with Medical Device certifications and regulations, including ISO 13485
How to Stand Out (Preferred Qualifications)
Experience working across diverse teams, including Legal, Quality, and IT, to achieve compliance goals
Familiarity with cybersecurity and privacy/regulatory frameworks, such as GDPR and the AI Act
A proactive and adaptable mindset, capable of quickly learning new project contexts
Additional Information We prioritize candidate privacy and champion equal‑opportunity employment. Central to our mission is our partnership with companies that share this commitment. We aim to foster a fair, transparent, and secure hiring environment for all. If you encounter any employer not adhering to these principles, please bring it to our attention immediately. We are not the EOR (Employer of Record) for this position. Our role in this specific opportunity is to connect outstanding candidates with a top‑tier employer.
#J-18808-Ljbffr