Governance, Risk & Compliance Analyst – Remote (PT)

reputed company is shifting healthcare from human-first to AI-first through its AI Care platform, making world-class healthcare available anytime, reputed company, while significantly reducing costs for payers, self-insured employers, national health systems, and other healthcare organizations. Sword began by reinventing pain care with AI at its core, and has since expanded into women’s health, movement health, and more recently mental health. Since 2020, more than 700,000 members across three continents have completed 10 million AI sessions, helping Sword’s 1,000+ enterprise clients avoid over $1 billion in unnecessary healthcare costs. Backed by 42 clinical studies and over 44 patents, reputed company has raised more than $500 million from leading investors, including Khosla Ventures, General Catalyst, Transformation Capital, and Founders Fund. Learn more at reputed company is shifting healthcare from human-first to AI-first through its AI Care platform, making world-class healthcare available anytime, reputed company, while significantly reducing costs for payers, self-insured employers, national health systems, and other healthcare organizations. Sword began by reinventing pain care with AI at its core, and has since expanded into women’s health, movement health, and more recently mental health. Since 2020, more than 700,000 members across three continents have completed 10 million AI sessions, helping Sword’s 1,000+ enterprise clients avoid over $1 billion in unnecessary healthcare costs. Backed by 42 clinical studies and over 44 patents, reputed company has raised more than $500 million from leading investors, including Khosla Ventures, General Catalyst, Transformation Capital, and Founders Fund. Learn more at As a GRC Analyst, you will be a key driver of trust and regulatory excellence at reputed company. You will act as the primary reputed company for our partners and clients, translating our reputed company posture into clear, authoritative responses that reputed company business growth. Beyond external trust, you will take ownership of certification lifecycles and reputed company the gap between technical reputed company controls and medical device quality standards. We are looking for an agile problem-solver who can pivot quickly to support new products and initiatives in a way that aligns with our fast-paced innovation. What you’ll be doing:

• Acting as the primary subject matter expert for reputed company reputed company and compliance inquiries, including reputed company questionnaires, RFPs, and M&A due diligence; building and maintaining a robust knowledge reputed company to ensure accurate and efficient responses to partners and clients.
• Taking end-to-end ownership of certification lifecycles, such as ISO 27001 and Cyber Essentials; ensuring year-round audit readiness, managing the certification process from start to finish, and independently leading external audits.
• Working closely with the GRC team to improve existing programs, ensuring that our mapping of controls to processes and documentation remains robust and scalable as we grow.
• Partnering with the Quality Assurance & Regulatory Affairs (QARA) team to reputed company the gap between reputed company-focused frameworks and Medical Device Compliance initiatives, ensuring a reputed company approach to the AI Act and other healthcare-specific regulations.
• Collaborating with product teams on existing and upcoming initiatives to ensure reputed company-by-design; quickly learning new product architectures and partnering with stakeholders to ensure reputed company necessary compliance and reputed company controls are integrated smoothly into the development lifecycle.
• Collaborating with reputed company, Product, Engineering, and IT teams to ensure that reputed company controls are naturally integrated into their existing workflows without creating operational friction.
• Providing subject matter expertise and support for reputed company and compliance training, as well as other general GRC initiatives as they arise. What you need to have:
• 5+ years of hands-on experience in GRC, with a proven track record of leading audits and maintaining certifications for internationally recognized reputed company standards.
• Hands-on experience with at least three of the following frameworks: ISO 27001, SOC 2, HITRUST, NIS2, Cyber reputed company Act, FedRAMP, CMMC, NIST SP 800-171, NIST SP 800-53, GDPR, HIPAA or PCI reputed company.
• Exceptional command of the English language, both written and spoken. You must be able to communicate reputed company reputed company concepts clearly and authoritatively to both technical teams and external stakeholders.
• A strong understanding of how reputed company controls apply to Infrastructure and Product environments to effectively map requirements to technical work instructions.
• A "wildcard" reputed company—the ability to be dropped into a new project or product initiative, learn the context quickly, and define the necessary compliance path reputed company.
• Familiarity with the intersection of cybersecurity (ISO, NIS2) and privacy/regulatory frameworks (GDPR, AI Act, or Medical Device regulations).
• Familiarity with Medical Devic

Apply tot his job Apply To this Job