Michigan Locals- GRC Analyst; Auditing Detroit, MI - Hybrid - onsite
Listed on 2026-10-16
-
IT/Tech
Cybersecurity, Information Security & Data Protection, IT Business Analyst, IT Consultant
Job Title
:
Only Michigan Locals- GRC Analyst (Auditing Experience) - USA
- Detroit, MI
- Hybrid
- One day onsite
Are you a GRC Analyst seeking a dynamic and rewarding opportunity? Our client, a leading company in Healthcare, is looking for a talented consultant to join their growing team.
About Kyyba:Founded in 1998 and headquartered in Farmington Hills, MI, Kyyba has a global presence
delivering high-quality resources and top-notch recruiting services, enabling businesses to
effectively respond to organizational changes and technological advances.
At Kyyba, the overall well-being of our employees and their families is important to us. We are
proud of our work culture which embodies our core values; incorporating value, passion,
excellence, empowerment, and happiness, creates a vibrant and productive atmosphere. We
empower our employees with the resources, incentives, and flexibility that they need to support
a healthy, balanced, and fulfilling career by providing many valuable benefits and a balanced
compensation structure combined with career development.
Kyyba is recruiting for the below mentioned position with our direct client which is one of the major Healthcare Payers in the US.
Will this position be required to work onsite for any reason at any time? Yes, required to come onsite at least weekly/one day a week
Engagement Description –
The EIS Compliance/Governance Analyst will be responsible for assisting in the responsibilities of executing the security framework compliance/governance activities and requirements for a major health care payer. Day-to-day responsibilities will also include documenting adherence to governance requirements across policies/standards, procedures, controls, compliance, training and awareness, and preparing metrics/KPIs and reporting materials.
Evaluate the design and operation effectiveness of Business/IT operations against the HITRUST CSF and identify areas of improvement
Interview SMEs and document meeting minutes from the discussion
Examine evidence/documentation, perform detailed testing and document detailed assessment notes/results
Learn the company functions/processes by conducting process walk-throughs
Analyze root cause of issues, provide recommendations for process improvements and risk mitigation based on assessment findings
Collaborate with cross-functional teams to mitigate risks and ensure compliance with HITRUST CSF
Deliver effective and concise documentation that meets HITRUST quality standards
Prepare and provide reporting such as dashboards and metrics, on various areas of performance, issue analysis and assessment statuses
Utilize GRC tools to effectively manage assessment remediation plans and documentation
Serve as a HITRUST subject matter expert
Participate and provide support during audits, assessments, or other required third-party reviews.
Support initiatives/projects
Build relationships internally to foster a culture of teamwork and collaboration
Top 3 Required Skills/Experience –At least 4 - 5 years of work experience in IT compliance, IT Assessments and/or IT audit experience as well as knowledge and understanding of governance, risk, compliance
Knowledge of security and risk frameworks, standards, best practices (e.g., HITRUST CSF, NIST CSF, ISO/IEC 27001, COBIT)
Self-starter with effective written and verbal communication skills along with strong critical thinking skill
Required Skills/Experience – The rest of the required skills/experience. Include:Effective written and verbal communication skills and the ability to tailor communication style to the audience at hand.
Experience in coordination and execution of the audit lifecycle, including evidence collection, review, observation tracking, management response collection and auditor…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).