Senior GRC Analyst - Mergers & Acquisitions (M&A)

Duration: 6+ Months
Compensation: $70-75/hr
Location: 100% Remote
We are seeking a Senior Governance, Risk, and Compliance (GRC) Analyst with strong experience in enterprise governance, risk management, regulatory compliance, and mergers and acquisitions (M&A).
Responsibilities:

• Support governance, risk, and compliance activities throughout the M&A lifecycle, including due diligence, risk assessment, and post-acquisition integration.
• Assess acquired organizations' governance processes, security controls, compliance posture, operational risks.
• Develop, implement, and maintain enterprise governance policies, procedures, standards, control frameworks.
• Conduct enterprise and third-party risk assessments, identify gaps, and coordinate remediation activities.
• Manage policy lifecycles, employee attestations, compliance monitoring, and governance reporting.
• Collaborate with information security, legal, audit, compliance, and business stakeholders.
• Support internal and external audits, regulatory compliance assessments, and remediation efforts.
• Drive continuous improvement and automation of GRC workflows and reporting processes.
• Maintain risk registers, governance documentation, and executive-level risk reporting.
• Support organizational change management and alignment of governance frameworks following acquisitions.

Required Qualifications:

• 8+ years of experience in Governance, Risk, Compliance, Information Security Governance, or Enterprise Risk Management.
• Demonstrated experience supporting mergers and acquisitions, including due diligence, risk assessments, or post-merger integration.
• Strong background in enterprise governance, policy management, risk assessments, and compliance programs.
• Experience with third-party risk management (TPRM), audit coordination, and control assessments.
• Working knowledge of NIST, ISO 27001, or other established risk and compliance frameworks.
• Experience working with GRC tools such as ServiceNow GRC/IRM, RSA Archer, or similar platforms.
• Excellent communication, documentation, stakeholder management, and program coordination skills.

Preferred Qualifications

• Healthcare experience, particularly within health insurance, managed care, or large healthcare enterprises.
• Knowledge of HIPAA, HITRUST, and healthcare regulatory requirements.
• Experience supporting complex enterprise integrations and organizational transformation initiatives.
• CISM, CISA, CRISC, CISSP, or related certifications.
• Experience with GRC process automation, operational risk reporting, and governance program improvements.

26-01250
#dice