Senior Governance, Risk, Compliance (GRC) Analyst

Headway is seeking a Senior Governance, Risk, Compliance (GRC) Analyst to build a modern, AI-enabled GRC program that scales with the business. The successful candidate will join the Security team and work across four pillars: security certifications, third-party risk management, security awareness training, and technical risk management.

Requirements

• 5+ years of experience in a GRC, compliance, or security risk role
• Working knowledge of at least two of: HITRUST, SOC 2, PCI-DSS, or HIPAA
• Experience using a GRC platform like Vanta, Drata, OneTrust, or similar to automate evidence collection or manage controls

Benefits

• Equity compensation
• Medical, Dental, and Vision coverage
• HSA / FSA
• 401K
• Work-from-Home Stipend
• Therapy Reimbursement
• 16-week parental leave for eligible employees
• Carrot Fertility annual reimbursement and membership
• 13 paid holidays each year as well as a Holiday Break during the week between December 25th and December 31st
• Flexible PTO
• Employee Assistance Program (EAP)
• Training and professional development