Senior GRC Analyst – Mergers & Acquisitions; M&A)

Duration: 6+ Months

Compensation: $70-75/hr

Location: 100% Remote

We are seeking a Senior Governance, Risk, and Compliance (GRC) Analyst with strong experience in enterprise governance, risk management, regulatory compliance, and mergers and acquisitions (M&A).

• Support governance, risk, and compliance activities throughout the M&A lifecycle, including due diligence, risk assessment, and post-acquisition integration.
• Assess acquired organizations’ governance processes, security controls, compliance posture, operational risks.
• Develop, implement, and maintain enterprise governance policies, procedures, standards, control frameworks.
• Conduct enterprise and third-party risk assessments, identify gaps, and coordinate remediation activities.
• Manage policy life cycles, employee attestations, compliance monitoring, and governance reporting.
• Collaborate with information security, legal, audit, compliance, and business stakeholders.
• Support internal and external audits, regulatory compliance assessments, and remediation efforts.
• Drive continuous improvement and automation of GRC workflows and reporting processes.
• Maintain risk registers, governance documentation, and executive-level risk reporting.
• Support organizational change management and alignment of governance frameworks following acquisitions.

• 8+ years of experience in Governance, Risk, Compliance, Information Security Governance, or Enterprise Risk Management.
• Demonstrated experience supporting mergers and acquisitions, including due diligence, risk assessments, or post-merger integration.
• Strong background in enterprise governance, policy management, risk assessments, and compliance programs.
• Experience with third-party risk management (TPRM), audit coordination, and control assessments.
• Working knowledge of NIST, ISO 27001, or other established risk and compliance frameworks.
• Experience working with GRC tools such as Service Now GRC/IRM, RSA Archer, or similar platforms.
• Excellent communication, documentation, stakeholder management, and program coordination skills.

• Healthcare experience, particularly within health insurance, managed care, or large healthcare enterprises.
• Knowledge of HIPAA, HITRUST, and healthcare regulatory requirements.
• Experience supporting complex enterprise integrations and organizational transformation initiatives.
• CISM, CISA, CRISC, CISSP, or related certifications.
• Experience with GRC process automation, operational risk reporting, and governance program improvements.