GRC & Privacy Analyst
繁荣是一家领先的行为改变技术公司，由阿里安娜·哈菲נגטאָן于2016年创立，其使命是结束压力和倦怠疫情。繁荣帮助个人和组织通过人工智能驱动的行为变革技术平台改善福祉，性能和心理弹性。繁榮微步 为了提高健康和生产力而采取了小型科学支持的措施 已被来自140多个国家的125多个组织的员工采用，从前线和呼叫中心工作者到跨国公司的高管。如果你不确定你是否100%合格，但这听起来像是一个你会在繁荣中获得的角色，我们希望你申请！我们相信技能是可转移的，我们对使命的热情远远.Thrive Global 正在寻找一个详细指向的 GRC （治理，风险和合规）和隐私分析师来加强我们的安全，合规和数据隐私姿势。在这个角色中，你将拥有并运营合规程序，管理审计周期，帮助嵌入健康专注的数据敏感组织中的设计原则。这是一个适合在安全框架，隐私监管和现代自动化工具交叉处繁荣的人员的理想位置。管理和优化 Vanta 等合规自动化平台，保持持续的控制监控和证据收集。· 在多个框架中进行领导和支持审计，与内部利益相关者和外部评估人员协调。·维护并成熟到 SOC 2,ISO 27001,ISO 27701,ISO 42001,HITRUST,HIPAA,NIST 800-53以及 NISTAI 风险管理框架 (AI RMF) 的合规程序。·解释和应用包括 HIPAA 和 GDPR 在内的隐私标准，确保数据处理实践符合法规义务。·开展风险评估，追踪补救工作，管理证据和控制文档。· 适用项目管理纪律，对合规倡议进行实施。• 制定时间表，协调跨职业所有者，并推动完成成果。· 利用人工智能工具来提高证据审查，策略编制，风险分析和报告工作流程的效率。
查看英文原文
Thrive is a leading behavior change technology company founded by Arianna Huffington in 2016 with the mission to end the stress and burnout epidemic. Thrive helps individuals and organizations improve well-being, performance and mental resilience with its AI-powered behavior change technology platform. Thrive’s Microsteps – small, science-backed steps to improve health and productivity – have been adopted by employees at more than 125 organizations in over 140 countries, from frontline and call center workers to executives at multinational companies.
If you’re not sure that you’re 100% qualified, but this sounds like a role you would Thrive in – we want you to apply! We believe skills are transferable and passion for our mission goes a long way.
Thrive Global is seeking a detail-oriented GRC (Governance, Risk, and Compliance) and Privacy Analyst to strengthen our security, compliance, and data privacy posture. In this role, you will own and operationalize compliance programs, manage audit cycles, and help embed privacy-by-design principles across a health-focused, data-sensitive organization. This is an ideal position for someone who thrives at the intersection of security frameworks, privacy regulation, and modern automation tooling.
How You’ll Contribute
- Administer and optimize compliance automation platforms such as Vanta, maintaining continuous control monitoring and evidence collection.
- Lead and support audits across multiple frameworks, coordinating with internal stakeholders and external assessors.
- Maintain and mature compliance programs mapped to SOC 2, ISO 27001, ISO 27701, ISO 42001, HITRUST, HIPAA, NIST 800-53, and the NIST AI Risk Management Framework (AI RMF).
- Interpret and apply privacy standards including HIPAA and GDPR, ensuring data handling practices meet regulatory obligations.
- Conduct risk assessments, track remediation efforts, and manage evidence and control documentation.
- Apply project management discipline to compliance initiatives — setting timelines, coordinating cross-functional owners, and driving deliverables to completion.
- Leverage AI tools to improve efficiency in evidence review, policy drafting, risk analysis, and reporting workflows.
Qualifications & Skills
- Demonstrated experience with GRC and compliance automation applications, particularly Vanta.
- Working knowledge of key security and privacy frameworks: SOC 2, ISO 27001, ISO 27701, ISO 42001, HITRUST, HIPAA, NIST 800-53, and NIST AI RMF.
- Strong understanding of privacy regulations, including HIPAA and GDPR.
- Proven experience managing or supporting audits and applying structured project management practices.
- Comfort and fluency with AI tools and a willingness to integrate them into daily workflows.
- Excellent written and verbal communication skills, with strong attention to detail.
- Relevant certifications (e.g., CISA, CIPP, ISO 27001 Implementer).
- Experience in a healthcare, wellness, or otherwise regulated data environment.
- Familiarity with AI governance and emerging AI compliance requirements.
✨ What We Offer:
- 🌍 Mission-Driven Impact: Be part of a company that’s truly making a difference in people’s lives around the world.
- 🚀 Career Growth: Develop within the company and help shape our growth strategy.
- 💙 Human-Centric Culture: Thrive in a supportive environment with a range of wellness perks and benefits.
- 💰 Competitive Compensation: Enjoy a comprehensive and rewarding total compensation package.
- 🩺 Health & Financial Benefits: Medical, dental, and vision coverage plus a 401(k) program with company match.
- 🌴 Time to Recharge: Generous paid time-off programs designed to help you rest, reset, and recharge — including Thrive Time, a benefit unique to Thrive that gives employees additional paid time off after major projects or intense periods of work to truly recharge and recover.
Compensation:
Total target compensation for this role will be $115,000 - $125,000.
- Please note: We provide a competitive mix of salary, performance bonus, and equity. The final offer amount will depend on factors like experience, expertise, and may differ from the range above. This range also excludes additional benefits, such as 401(k), and medical, dental, or vision insurance.
Thrive is deeply committed to creating a safe and welcoming work environment free of discrimination and harassment so that all employees can bring their whole selves to work.
Thrive is proud to ensure equal employment opportunity (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, disability, genetics, gender, gender identity, gender expression, sexual orientation, age, marital status, family or parental status, veteran status, or any other characteristic protected by applicable federal, state or local law.
Thrive is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. Please inform Thrive’s Recruiting team if you need any assistance completing any forms or to otherwise participate in the application process.
Originally posted on Himalayas