Senior Governance, Risk, Compliance (GRC) Analyst
Headway
San Francisco, Seattle, New York
Workplace: HybridFull timeUSD 161,600 - 202,000 annuallyFunction: Legal, Risk & ComplianceExperience: 5+ yearsSkills: ["Communication","Process building","Cross-functional collaboration","Risk management"]Join the GRC team within Security to mature Headway’s compliance program for sensitive health data. Support audit readiness for HITRUST, SOC 2, PCI-DSS, and HIPAA, manage the vendor security assessment lifecycle, and run security awareness training including phishing simulations and annual compliance. Own the centralized risk register and partner with Privacy, Legal, IT, and Engineering to embed compliance into day-to-day operations.

