Job Closed
This listing is no longer active.
The next-generation payments infrastructure for software companies to quickly and easily embed and monetize payments.
GRC Engineer
Location
United States
Posted
111 days ago
Salary
0
Seniority
Senior
Job Description
GRC Engineer
Payabli
• Own and maintain the compliance platform (Drata), including control mapping, evidence collection, continuous monitoring, and audit workflows • Manage control documentation, policies, procedures, and supporting artifacts across multiple compliance frameworks • Perform risk assessments, vendor security reviews, and control gap analyses, and track remediation through to completion • Partner with Security, IT, and Engineering teams to ensure technical and administrative controls align with documented policies and compliance requirements • Support internal and external audits, including SOC 2, PCI DSS, and customer security reviews • Conduct periodic user access reviews and assist with access governance and RBAC validation • Develop and maintain compliance reporting, metrics, and executive ready summaries • Identify and implement automation opportunities to streamline evidence collection, access reviews, and policy lifecycle management
Job Requirements
- Hands on experience operating and maintaining a compliance platform such as Drata or similar
- Strong understanding of GRC fundamentals, including control design, evidence management, and audit readiness
- Experience performing user access reviews and supporting identity and access governance processes
- Working knowledge of security and compliance frameworks such as PCI DSS, SOC 2, ISO 27001 or ISO 42001, and NIST
- Experience collaborating with technical teams to validate cloud, application, and security controls
- Strong documentation skills with the ability to translate technical controls into clear compliance narratives
Benefits
- Competitive base
- Equity package
- 100% remote (US-based)
- Medical, dental, and vision
- 401(k) program (eligible after 3 months)
- Unlimited PTO
Related Guides
Related Categories
Related Job Pages
More Compliance Jobs
Manager Strategy – Regulatory, LatAm
VeevaHeadquartered in Pleasanton, California, Veeva is a leading provider of cloud-based software and services for the life sciences industry. As an employer, Veeva
• Responsible for growing and sustaining the Regulatory market in Latam, with a primary focus in Brazil and Mexico, for the Vault RIM applications including Vault Registrations, Submissions, Submissions Archive, and Submissions Publishing (eCTD 4.0) • Provide thought leadership and sales support to teams in driving new opportunities in the Regulatory space • Develop strategy and messaging for customer adoption of new products and features, and functionality for new and existing customer base • Present at industry conferences, leading webinars, and authoring articles for industry publications • Provide business guidance to the product team in support of new or enhanced features and functionality in regulatory applications
• Assist in managing and responding to facility compliance inquiries. • Assist in covering Compliance Officer positions during vacancies. • Assisting with administrative activities associated with Tenet compliance operations and enterprise-wide compliance initiatives. • Assisting with the execution of the Tenet hospital compliance workplan. • Assist with conducting auditing and monitoring activities related to the Tenet compliance programs. • Assist with preparing Tenet compliance education and training initiatives. • Assist with Compliance Champion Program. • Partner with Human Resources to evaluate compliance training assignments for employees on a leave of absence. • Conduct preliminary fact gathering and assessment of reported issues. • Assist with implementation of corrective action plans resulting from investigations, audits, or other identified compliance issues. • Assist with preparing compliance reports to facility leaders or for compliance meetings. • Develop compliance dashboards and data analytic spreadsheets. • Other duties as assigned.
• Advise leadership at facilities within assigned state on issues concerning compliance, and ethics matters including recommending controls designed to ensure compliance. • Work collaboratively with leadership at facilities within assigned state in compliance, ethics and privacy/security program development and implementation. • Establish effective working relationships and build credibility with stakeholders to support a culture of ethics and compliance. • Interface directly with leadership and employees at facilities within assigned state to serve as a sounding board for their concerns about ethics and compliance matters. • Lead quarterly state level Compliance Committees meetings. • Attend facility Board meetings in person or virtually. • Assists in the implementation of Tenet education and training program that focuses on the requirements of the Quality, Compliance and Ethics Charter, Tenet’s ethics and compliance program, and the privacy and security program to ensure that all employees, contractors, and physicians within the region are knowledgeable of Federal healthcare program requirements and the requirements of the Ethics and Compliance program as required to perform their respective roles. • Coordinate with Tenet counsel to facilitate communication between the Compliance and Ethics Department and Law Department on legal and compliance matters. • Assists in auditing, monitoring and oversight processes related to identified risks. • Oversee the implementation of corrective actions and monitoring in response to identified issues and audits. • Implement approved monitoring systems and processes for compliance and ethics issues in the state. • Implement approved procedures that encourage facility employees, leadership, contractors, and physicians to report suspected fraud or other improprieties without the fear of retaliation. • Work collaboratively with corporate personnel to resolve all compliance issues identified. • Implement the Tenet hospital compliance work plan and initiatives and systems to prevent compliance and privacy/security issues from arising within assigned facilities. • Act as a consultative resource on compliance and ethics matters.
• Provide compliance leadership in assigned region on issues concerning ethics and compliance matters, including recommending controls designed to ensure compliance. • Work collaboratively with facility and regional leadership within assigned territory to ensure ethics and compliance, privacy/security program development and implementation. • Establish effective working relationships and build credibility with stakeholders to support a culture of ethics and compliance. • Interface directly with leadership and employees at facilities within assigned territory to serve as a sounding board for their concerns about ethics and compliance matters. • Assist with Compliance Committee and/or Board Committee preparations and meetings as applicable. • Assists in the implementation of Tenet education and training program that focuses on the requirements of the Quality, Compliance and Ethics Charter, Tenet’s Ethics and Compliance program, and the privacy and security program to ensure that all employees, contractors, and physicians within the region are knowledgeable of Federal healthcare program requirements and the requirements of the Ethics and Compliance program as required to perform their respective roles. • Coordinate with TPR counsel to facilitate communication between the Ethics and Compliance Department and Law Department on legal and compliance matters. • Assists in auditing, monitoring and oversight of processes related to identified risks. • Conduct regular site visits using standard tools as required. • Oversee the implementation of corrective actions and monitoring in response to identified issues and audits. • Implement approved monitoring systems and processes for ethics and compliance issues. • Oversee implementation of approved procedures that encourage facility employees, leadership, contractors, and physicians to report suspected fraud or other improprieties without the fear of retaliation. • Work collaboratively with team members and corporate personnel to resolve all compliance issues identified. • Implement the Tenet /TPR hospital compliance work plan initiatives, and systems to prevent compliance and privacy/security issues from arising within assigned facilities. • Act as a consultative resource on ethics and compliance matters.


