Join the frontlines of today's healthcare transformation

We're looking for a GRC Analyst to help us transform the way primary care is delivered and how patients are served.

Why VillageMD?

VillageMD is changing the trajectory of healthcare. We're empowering primary care physicians to make informed decisions, and engaging patients in meaningful ways. We work with thousands of clinicians and healthcare disruptors across the country, improving patient health while driving down the cost to deliver it.

We are a mission-oriented organization, and we are thrilled about the work that we accomplish every day. We're transparent. Collaborative. Relentless in pursuit of our mission. With a confidence to lead but the humility to never stop learning. We believe that diverse backgrounds and experiences create the best opportunity for innovation. And we know that the community we are growing is greater than any one individual.

We've built our technology using the best of cloud and open-source technologies to create an open, data-first platform that is enriched with analytical models and connected to the most modern internal and external apps. These apps drive clinical decision support, patient engagement and other facilitators of innovative, information-enriched health experiences.

Could this be you?

See for yourself how the Senior GRC Analyst helps reshape successful healthcare with VillageMD:

We are seeking a Senior GRC Analyst who can perform the fundamental tasks assigned as a Senior GRC Analyst and fulfill the daily operations of Compliance, Risk Management and Security Awareness Programs.

How you can make a difference

During your first year, you can expect the following professional challenges:

• Work with business and technology delivery teams to define and maintain an effective suite of controls adapting to changes in products, business processes and technology solutions
• Partner with internal and external groups that periodically assess control effectiveness to ensure that these assessments are conducted in a smooth and efficient manner and that any issues and exceptions identified in the operation of controls are promptly and enduringly corrected
• Maintain an accurate and continuously updated inventory of IT controls including their objectives, operational processes, and responsible control owner
• Collaborate with IT control owners to continuously monitor control effectiveness and act as a trusted advisor to business and technology leadership on the design and effective operation of controls
• Continuously assess technology delivery and operation within VillageMD to identify process, technology operation, regulatory, or compliance risks and develop the necessary strategies to reduce and/or remediate these risks
• Facilitate communication and coordinated action across VillageMD and enterprise leadership to track and address identified risks
• Assist VMD technology and business leaders with remediation efforts
• Maintain and report metrics over the VMD compliance program for various stakeholders
• Work with the GRC management team to advance the VMD Security Awareness program and other initiatives
• Ensure compliance with applicable business, industry, and regulatory standards
• Assist the Vendor Risk Lead with vendor review activities.
• Oversee and participate in the completion and analysis of clinic audits

Skills for success

As a successful VillageMD a Senior GRC Analyst you possess:

• Strong organizational and process documentation skills
• The ability to create and refine processes that are adaptable but wildly scalable
• Think clearly, communicate concisely, and collaborate always
• Thrive in a fast-paced environment, with, at times, minimal guidance, and absorb information quickly to create a plan to execute against
• A low ego; an ability to gain trust by doing what you say you will do
• The ability to adapt to changing priorities and business/IT demands

Experience to drive change

• 5+ years' experience leading enterprise-wide compliance initiatives including, but not limited to, SOC2, HIPAA, SOX, NIST and others
• Experience in all aspects of project management including, developing metrics, defining appropriate communication criteria, and maintaining budgets
• History of optimization of process and projects across functional areas
• Track record of successfully executing projects in collaboration with both technical and non-technical stakeholders.
• Consulting experience highly preferred
• CISSP, CISM, CISA or comparable security certification
• Experience with obtaining a SOC2 highly preferred
• Graduate Degree (MBA, MIS, etc.) or working towards preferred, but not necessary.

For Colorado Residents only: The base compensation range for this role is $80,000 to $110,000. At VillageMD, compensation is based on several factors including but not limited to education, work experience, certifications, location, etc. This role may be eligible for annual/quarterly bonus incentives (if applicable), and the selected candidate will be eligible for a valuable company benefits plan, including health insurance, dental insurance, life insurance, and access to a 401k plan with company match.