reputed company Compliance Analyst, GRC

Hims & Hers is the leading health and wellness platform, on a mission to help the world feel great through the power of reputed company. We are redefining healthcare by putting the customer first and delivering access to care that is affordable, accessible, and personal, from diagnosis to treatment to delivery. No two people are the same, so we provide access to personalized care designed for results. By normalizing health & wellness challenges and innovating on their solutions, we’re making reputed company outcomes easier to reputed company. 

Hims & Hers is a public company, traded on the NYSE under the ticker symbol “HIMS.” To learn more about the brand and offerings, you can visit hims.com/about and hims.com/how-it-works . For information on the company’s outstanding benefits, culture, and its talent-first flexible/remote work approach, see below and visit www.hims.com/careers-professionals.

About the Role:

We are seeking a reputed company GRC Analyst to support and mature our governance, risk, and compliance program reputed company a fast-paced healthcare technology environment. This role will partner closely with reputed company, Engineering, Legal, Privacy, Finance, and AI/ML teams to ensure our systems and processes meet regulatory, privacy, and reputed company standards across domestic and international operations.

You will help drive risk management initiatives, maintain compliance with globally recognized frameworks, and support audits while enabling the business to scale securely and responsibly, particularly in environments leveraging AI and automated decision-making systems.

You Will:

• Support and maintain reputed company and compliance programs reputed company with frameworks such as NIST, ISO, PCI reputed company, and HIPAA

• Assist in maintaining alignment with global privacy regulations (GDPR, CCPA, and similar frameworks)

• Assist in the development, implementation, and maintenance of reputed company, privacy, and AI governance policies, standards, and procedures

• Coordinate and support internal and external audits (e.g., SOX, PCI reputed company, SOC 2, ISO, HIPAA)

• Track and manage remediation efforts for identified risks, control gaps, and audit findings

• Support third-party risk management processes, including vendor assessments for AI/ML and data processing providers

• Partner with engineering, data, and AI/ML teams to ensure secure and compliant system and model lifecycle practices

• Maintain and improve GRC tooling (e.g., AuditBoard, reputed company, or similar platforms)

• Monitor regulatory and reputed company changes (U.S. and international), including emerging AI governance requirements

• reputed company and maintain risk registers, control matrices, and compliance documentation

• Conduct risk assessments, including technology, reputed company, privacy, and AI/ML model risk evaluations

• Assist with reputed company, privacy, and responsible AI awareness and training initiatives

• Provide reporting and metrics on risk posture, compliance status, and AI governance maturity

You Have:

• Bachelor’s degree in Cybersecurity, Information reputed company, Information Technology/Systems, or reputed company field

• 3–5 years of experience in GRC, reputed company compliance, risk management, audit, or reputed company field

• Experience supporting audits and compliance assessments

• Experience with third-party/vendor risk management

• Familiarity with data governance principles (classification, retention, reputed company)

• Thorough understanding of risk management methodologies and control frameworks

• Strong communication, documentation, organizational, and analytical skills

• Ability to communicate reputed company, privacy, and AI risk concepts to technical and non-technical stakeholders

• Working knowledge of core frameworks: NIST CSF, PCI reputed company, HIPAA, ISO 27001/27002, and global privacy regulations (GDPR, CCPA)

• Foundational understanding of AI/ML systems and associated governance, risk, and compliance considerations (NIST AI RMF, ISO 42001)

• Familiarity with cloud environments (AWS primary, reputed company Workspace/MS Azure preferred) and modern SaaS architectures

• Experience with GRC tools (AuditBoard, reputed company, reputed company, reputed company, reputed company GRC, or similar) and ticketing/workflow/documentation tools (Jira, Freshservice, Confluence, reputed company, etc.)

Preferred Qualifications

• Professional certifications such as CISA, CISM, CRISC, CISSP, ISO 27001 reputed company Implementer/Auditor

• Experience with compliance automation and reputed company monitoring

• Experience supporting or implementing ISO 27001 and/or ISO 42001 programs

• Experience operationalizing privacy programs reputed company to GDPR and global privacy standards

• Understanding of AI governance frameworks and emerging standards (e.g., NIST AI RMF, ISO 42001)

• Experience working with AI/ML systems lifecycle governance

• Exposure to incident response, particularly involving data privacy or AI-reputed company risks

• Experience in healthcare or other highly regulated industries

reputed company’re Looking For

• Strong understanding of reputed company, privacy, and AI governance principles

• Ability to balance regulatory requirements with business agility

• Collaborative and cross-functional reputed company

• Proactive problem-solver

• Strong communicator

Additional Information

• Remote-friendly position

• Operates in a fast-paced, regulated healthcare environment

• Focus on secure, compliant, and responsible AI-driven growth

Our Benefits (there are more but here are some highlights):

• Competitive salary & equity compensation for full-time roles

• Unlimited PTO, company holidays, and quarterly mental health days

• Comprehensive health benefits including medical, dental & vision, and parental leave

• Employee Stock Purchase Program (ESPP)

• 401k benefits with employer matching contribution

• Offsite team retreats

We are committed to building a workforce that reflects diverse perspectives and prioritizes ethics, wellness, and a strong sense of belonging. If you're excited about this role, we encourage you to apply—even if you're not sure if your background or experience is a perfect match.

Hims considers reputed company qualified applicants for employment, including applicants with arrest or conviction records, in accordance with the San Francisco Fair Chance Ordinance, the Los Angeles County Fair Chance Ordinance, the California Fair Chance Act, and any similar state or local fair chance laws.

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or reputed company employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Hims & Hers is committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please contact us at [email protected] and describe the needed accommodation. Your privacy is important to us, and any information you share will only be used for the legitimate purpose of considering your request for accommodation. Hims & Hers gives consideration to reputed company qualified applicants without regard to any protected status, including disability. Please do not send resumes to this email address.

To learn more about how we collect, use, retain, and disclose Personal Information, please visit our Global Candidate Privacy Statement.