Jot Title – Compliance Analyst
Location – Hyderabad, India
Department – Information Security
Job Summary
Eclat Health Solutions is looking for a skilled GRC analyst to support the organization’s Governance, Risk and Compliance needs. This is a key position with the responsibility of conducting risk assessments, responding to the security questionnaires and RFPs, implementing Governance policies, implementing GRC tool and help conducting internal as well as participating in external compliance audits.
Governance & Compliance:
Ensure adherence to regulatory standards, including HIPAA, HITECH, ISO 27001, SOC 2, and CMS regulations.
Develop, review, and update policies and procedures to align with healthcare and IT compliance mandates.
Conduct internal compliance audits and risk assessments.
Participate and supports external compliance audits including HIPAA, SOC2 Type1/Type2, HITRUST & ISO 27001.
Security Questionnaires & Assessments:
Evaluate and respond to security questionnaires from customers and healthcare partners.
Conduct security assessment reviews to identify gaps and recommend mitigation strategies.
GRC Tool Implementation:
Support deployment & implementation of GRC tools.
Maintain and optimize GRC systems to streamline compliance and risk processes.
Provide training and support for end-users of GRC platforms.
Regulatory & Risk Management Knowledge:
Conduct Risk assessment based on the frameworks like HITRUST and NIST frameworks
Maintain Risk Register and follow up for the Risk treatment
Qualifications
Bachelor’s degree in computer science or equivalent.
2 Year + experience in GRC field
Strong understanding of governance, risk, and compliance principles in healthcare.
Experience handling security questionnaires and compliance assessments.
Hands-on experience with GRC tools (e.g., Hyperproof, Archer, OneTrust, ServiceNow).
Basic IT knowledge, including cybersecurity best practices and data protection measures.
Experience conducting office audits and compliance readiness for new locations.
Excellent policy drafting and procedural documentation skills.
Strong proficiency in MS Office tools for reporting and analysis.
GRC certification is preferred.
Strong communication skills
Be able to work and collaborate with the US team during US morning hours.
