Senior GRC Associate

Strata Decision Technology•Chicago, IL

6h•Hybrid

About The Position

The Senior Compliance Associate will work inside Strata’s Information Technology group and assist with all aspects of governance, risk, and compliance. This position works collaboratively to ensure Strata complies with industry regulations, client requirements, and best practices. This position serves as a subject matter expert in key certifications and regulatory frameworks, including state privacy laws, HIPAA, ISO 27001, and SSAE 18.

Requirements

Bachelor’s degree or equivalent years of IT work experience
Minimum 4+ years of experience with a concentration in IT Governance, Risk, and Compliance
Experience achieving and maintaining HITRUST certification
Experience with SOC Controls
Excellent communication skills including the ability to communicate technical issues to users with little technical background/expertise
Focus on Integrity and Reliability
Self-motivated, proactive and able to manage multiple priorities
Ability to work with audiences at all levels of the organization
Mastered knowledge in: Microsoft office suite
Mastered knowledge in: Technical writing
Mastered knowledge in: Internal/External auditing

Nice To Haves

CCSFP
CRISC
CISA

Responsibilities

Lead and coordinate HITRUST certification efforts, including audit readiness, evidence management, and external assessor coordination
Support SOC 2 Type II compliance, including control testing, audit support, and ongoing control effectiveness monitoring
Manage Disaster Recovery and Business Continuity programs, including planning, coordination, and execution of testing exercises
Lead responses to customer security questionnaires (DDQs) and internal compliance requests, partnering cross-functionally to deliver accurate and timely information
Drive remediation by managing corrective action plans (CAPs) and coordinating cross-functional efforts to closure
Drive vendor risk management and security due diligence processes
Maintain security documentation and support ongoing compliance initiatives, including AI governance and data practices in an AI-forward environment