Charlie Health
GRC Engineer
Remote, United States · Full-time
Sponsorship not specifiedDetected 16 days ago
PythonBashPowerShellSQLAWSTerraformRESTData AnalysisLLMsCybersecuritySOC OperationsComplianceJiraConfluenceZero TrustHIPAACommunicationProblem Solving
About the role
- The GRC Engineer is responsible for transforming Charlie Health's compliance, risk and control programs into automated, measurable and continuously monitored systems.
- Our Information Security and IT organizations treat compliance as an engineering discipline.
- We value ownership, automation, measurable outcomes, reliability, auditability and continuous improvement.
Responsibilities
- Design, build and operate automated controls that support HIPAA, SOC 2, NIST, ISO 27001 and other applicable frameworks
- Build scalable systems that reduce manual compliance work and improve confidence in control effectiveness
- Partner with Security, IT, Compliance and Engineering teams to embed control requirements into systems and operating processes
- Build and maintain continuous control monitoring capabilities across identity, endpoints, cloud, SaaS platforms, security tools and business systems
- Identify control gaps, exceptions and drift, then partner with control owners to drive remediation
- Improve visibility into the design, operation and effectiveness of key controls
- Build repeatable evidence workflows that support HIPAA, SOC 2, customer due diligence, vendor assessments and internal risk reviews
- We deliver personalized, virtual care rooted in connection-between clients and clinicians, care teams, loved ones, and the communities that support them.
- If you're ready to use your skills to drive lasting change and help more people access the care they deserve, we'd love to meet you.
Requirements
- 3+ years of experience in GRC engineering, security engineering, compliance automation, IT risk, security operations, cloud security, infrastructure engineering or a related technical discipline
- Experience with frameworks such as HIPAA, SOC 2, NIST, ISO 27001, HITRUST, PCI or FedRAMP
- Experience working with enterprise systems such as Okta, Google Workspace, AWS, Jamf, Intune, SentinelOne, Wiz, Jira, Confluence, Slack or similar platforms
- Experience using APIs, scripting or workflow automation tools such as Python, Bash, PowerShell, Workato, Terraform, REST APIs, webhooks or JSON
- Experience with audit evidence collection, control testing, remediation tracking or compliance reporting
- Familiarity with GRC platforms, compliance automation tools, ticketing systems or control monitoring systems
- Strong understanding of access control, endpoint security, cloud security, logging, vulnerability management and data protection concepts
- Ability to work cross-functionally with Security, IT Engineering, Compliance, Legal and business stakeholders
- Strong analytical thinking, ownership and ability to operate independently in ambiguous environments
Nice to have
- Experience supporting HIPAA, SOC 2, NIST, HITRUST, ISO 27001 or similar programs
- Experience with GRC or compliance automation platforms such as Vanta, Drata, Secureframe, AuditBoard, Archer, ServiceNow GRC or similar tools
- Experience with data analytics, dashboards, SQL, BI tools or control reporting
- Experience supporting customer security reviews, vendor assessments or audit response workflows
- Experience with AI governance, AI risk management, LLM platforms or AI-enabled compliance automation
- Familiarity with Zero Trust principles and identity-centric security models
Compensation
- The total target base compensation for this role will be between $130,000 and $175,000 per year at the commencement of employment.
Benefits
- Charlie Health is pleased to offer comprehensive benefits to all full-time employees.
- Read more about our benefits here.
- Further, cash compensation is only part of the total compensation package, which, depending on the position, may include stock options and other Charlie Health-sponsored benefits.
- Why Charlie Health?
- Millions of people across the country are navigating mental health conditions, substance use disorders, and eating disorders, but too often, they're met with barriers to care.
- From limited local options and long wait times to treatment that lacks personalization, behavioral healthcare can leave people feeling unseen and unsupported.
- Charlie Health exists to change that.
- Our mission is to connect the world to life-saving behavioral health treatment.
- As a rapidly growing organization, we're reaching more communities every day and building a team that's redefining what behavioral health treatment can look like.
- Define control health metrics, thresholds, alerts and reporting mechanisms
- Please note, pay will be determined on an individualized basis and will be impacted by location, experience, leveling, expertise, internal pay equity, and other relevant business considerations.
Company info
- This role will help ensure that controls protecting patient, clinician, employee and company data are well-designed, consistently operated and supported by reliable evidence.
Equal opportunity
- Being an Equal Opportunity Employer means every member of our team feels as though they are supported and belong.
Visa & Work Authorization
- You can reply STOP to opt out at any time.
Apply directly at Charlie Health →Create a free account for alerts like thisView Charlie Health immigration profile
This listing is sourced directly from Charlie Health's careers page and normalized into a canonical job model.