Risk and Compliance Associate

Ready Computing•New York, NY

22h•Remote

About The Position

At Ready Computing, we specialize in data-centric IT solutions that help organizations across healthcare, supply chain, finance, and manufacturing optimize their technology and data strategies. With offices in the U.S. and the UK, we provide expert consulting, development, and managed services to clients worldwide. We're committed to hiring top talent to drive innovation, particularly in the healthcare IT space. As part of our commitment, we are seeking a highly organized, detail-oriented, and process-driven Risk and Compliance Associate to join our centralized Compliance and Risk Management team. Ready Computing operates a mature, certified Integrated Management System (IMS) spanning ISO 9001:2015, ISO/IEC 20000-1:2018, ISO/IEC 27001:2022, HITRUST CSF r2, as well as several other major standards and frameworks. As a Virtual-First enterprise, our compliance operations are cloud-native and deeply integrated into our technical and business lifecycles. The successful candidate will serve as the administrative engine of our daily compliance workflows. This role requires a unique blend of exceptional administrative rigor, advanced document control skills, clear communication, and a systematic, logical approach to process execution, providing critical operational and administrative support across our core Compliance programs. Your contributions will directly support our leadership team, ensuring our systems of record remain accurate, auditable, and resilient.

Requirements

Bachelor’s degree or equivalent practical experience.
1-3 years of experience in a role requiring a high degree of organization and administrative control—such as GRC coordination, IT project coordination, legal assistant/paralegal, document control specialist, or quality assurance.
Demonstrated ability to work independently, maintain high productivity, and communicate proactively in a fully remote, Virtual-First environment.
Advanced Mastery of Microsoft Word and Google Workspace: Proven, elite-level ability to design, style, template, and review complex documents using advanced formatting features (e.g., style sheets, headers/footers, section breaks, tracking changes).
Meticulous Precision and Detail: A natural habit of checking every word, acronym, and cross-reference to ensure records and data are maintained flawlessly.
Process-Oriented Thinking: An innate ability to understand, follow, and execute structured, multi-step procedures and track evidence end-to-end.
Deadlines and Schedule Execution: Exceptional time management; able to manage multiple GRC queues and proactively follow up with busy executives to meet compliance schedules.
Integrity and Discretion: Complete confidentiality and professionalism when handling sensitive HR, legal, financial, and regulatory records.
Research and Analysis: Conducts independent data mining, research, and analysis on key Risk and Compliance topics.
Ability to work on a computer for extended periods, including typing, using a mouse, and viewing a screen.
Ability to communicate effectively and professionally with team members, peers, and stakeholders via video conferencing, chat, and telephone is essential.
Ability to manage multiple concurrent tasks and maintain focus in a self-directed, remote work environment.
Infrequent lifting and carrying of equipment, such as a company-issued laptop, may be required.

Nice To Haves

Direct experience working within a security, compliance, legal, or IT auditing team.
Familiarity with compliance standards and frameworks (e.g., ISO 9001, ISO 27001, ISO 20000-1, HITRUST CSF, HIPAA, NIST, GDPR).
Experience using GRC platforms (e.g., Thoropass) or ticketing engines (e.g., Jira, Confluence).

Responsibilities

Serve as the administrative engine of our daily compliance workflows.
Provide critical operational and administrative support across our core Compliance programs.
Ensure our systems of record remain accurate, auditable, and resilient.
Manage the day-to-day administrative execution and record-keeping across our core program areas.
Act as a collaborative, supportive partner enabling the compliance success of all internal business units.
Perform advanced-level mastery of document styling, structure, and lifecycle tracking per Company policies and our internal IMS Documentation Writing Standard.
Standardize, format, and convert legacy documentation and templates utilizing Microsoft Word with meticulous precision.
Monitor incoming documentation requests, perform initial intake, analyze request details, and execute first-pass document drafts.
Actively follow up with requesters to clarify ambiguous instructions.
Review draft policies, plans, and procedures to identify logical gaps, mutual exclusivities, legacy or obsolete parameters, and misalignments between external compliance matrices and internal documentation.
Map and verify the end-to-end integrity of procedures from the core business purpose, required inputs, step-by-step technical execution, to the final expected output and evidence generation.
Maintain the authoritative Document Control Master List with absolute accuracy.
Enforce strict File Naming Conventions (FNC) and version control standards across all shared drives and directories.
Manage the annual revision cycles by proactively alerting document owners of upcoming review deadlines.
Run-down and report on active documents in the queue to maintain administrative momentum.
Schedule and participate in post-implementation team meetings following major document releases to review, document, and learn from what changed and why.
Manage the incoming queue of security, compliance, and regulatory requests from both internal departments and external clients.
Provide immediate intake, triage, and prioritization of incoming requests.
Write clear, actionable notes and context to assist technical SMEs prior to ticket routing.
Coordinate external client security and compliance questionnaires.
Execute initial first-pass drafting of answers utilizing the GRC platform and standard answer libraries, completing responses as far as possible before escalating to secondary specialists.
Generate and maintain active reports on support tickets and questionnaires in queue to ensure complete visibility and strict SLA compliance.
Support the closed-loop tracking of compliance "misses" or process deviations per Company policies.
Maintain the central NCAR and Actions Log with meticulous accuracy.
Log new non-conformances identified during internal audits, quality assurance reviews, or client feedback.
Initiate and coordinate the completion of formal NCAR Forms (QMS FORM-0014) with process owners.
Proactively track the status of approved Corrective Action Plans (CAPs) and follow up with owners across all levels of the organization to guarantee timely closure of action items.
Support data-driven compliance reviews and reporting.
Coordinate with Key Performance Indicator (KPI) and metric owners across the business on a monthly and quarterly basis to gather performance data.
Port and aggregate raw data into our centralized GRC systems and performance reports, conducting initial validation checks to ensure data completeness and integrity.
Formally coordinate administrative logistics for quarterly Management Review Meetings (MRMs).
Prepare and draft 2 to 3 specific slides within the MRM presentation deck—focusing specifically on KPIs, training metrics, and program-level data within your direct purview.
Log and track post-MRM action items.
Execute routine administrative support to ensure the integrity of our core governance programs.
Administer the intake and tracking of annual workforce Conflict of Interest (COI) disclosures and annual Remote Worksite Evaluation Checklists, performing completeness reviews.
Support the day-to-day management of the DSR queue.
Maintain the secure GDPR Data Subject Request Log and monitor fulfillments against strict statutory SLAs.
Facilitate the administrative onboarding of third-party vendors.
Send questionnaires, track responses, perform initial completeness reviews, and update the Vendor Risk Register and Performance Logs.
Coordinate audit schedules, prepare interview checklists, take meeting minutes, and log approved audit findings.