Is the GRC Analyst position at AP MAX INC fully remote?

Yes, this GRC Analyst position at AP MAX INC is a remote position. The role is available for candidates in Portugal.

Is this a full-time or part-time GRC Analyst role?

This is a full-time GRC Analyst position at AP MAX INC.

What are the main requirements for the GRC Analyst role?

Key requirements include: Minimum 4+ years of experience in GRC, compliance, or information security, Hands-on experience with SOC 2 frameworks, Knowledge of HIPAA security requirements, and more.

What benefits does AP MAX INC offer for this position?

AP MAX INC offers the following benefits: Vision Insurance, Dental Insurance, Pay in Crypto.

How do I apply for the GRC Analyst position at AP MAX INC?

You can apply for this GRC Analyst position by clicking the "Apply Now" button on this page, which will take you to AP MAX INC's application portal.

GRC Analyst at AP MAX INC

Portugal

<div>Company Overview At Allia Health Group, the umbrella organization for Southend Pharmacy, Brello Health, and Woven, we don’t just follow industry trends—we redefine them. Our mission is to commoditize anti-aging solutions, making them affordable and accessible to the average consumer—not just the wealthy. By offering customized and cost-effective wellness products that follow cost-containment models, we aim to improve people’s quality of life and meet them wherever they are on their health journey.Job Summary The GRC Analyst will lead and operationalize the organization’s SOC 2 compliance program while supporting broader governance, risk, and compliance initiatives. This role is responsible for building policies, managing compliance frameworks, and ensuring audit readiness across the organization.The ideal candidate is hands-on, detail-oriented, and capable of driving cross-functional alignment across technical and business teams.Key Responsibilities<ul><li data-start="1214" data-end="1767" style="font-family: arial, sans-serif; font-size: 16px; line-height: 1; color: rgb(0, 0, 0);">Lead SOC 2 Type 1 gap assessment and readiness initiatives</li><li data-start="1214" data-end="1767" style="font-family: arial, sans-serif; font-size: 16px; line-height: 1; color: rgb(0, 0, 0);">Develop and maintain information security policies and procedures</li><li data-start="1214" data-end="1767" style="font-family: arial, sans-serif; font-size: 16px; line-height: 1; color: rgb(0, 0, 0);">Manage compliance platform and control evidence collection</li><li data-start="1214" data-end="1767" style="font-family: arial, sans-serif; font-size: 16px; line-height: 1; color: rgb(0, 0, 0);">Execute HIPAA compliance initiatives and maintain documentation</li><li data-start="1214" data-end="1767" style="font-family: arial, sans-serif; font-size: 16px; line-height: 1; color: rgb(0, 0, 0);">Maintain risk register and conduct regular risk assessments</li><li data-start="1214" data-end="1767" style="font-family: arial, sans-serif; font-size: 16px; line-height: 1; color: rgb(0, 0, 0);">Manage vendor security reviews and assessments</li><li data-start="1214" data-end="1767" style="font-family: arial, sans-serif; font-size: 16px; line-height: 1; color: rgb(0, 0, 0);">Partner with engineering teams to align technical controls with compliance requirements</li><li data-start="1214" data-end="1767" style="font-family: arial, sans-serif; font-size: 16px; line-height: 1; color: rgb(0, 0, 0);">Serve as primary point of contact for external auditors</li></ul>What We Require<ul><li data-start="1769" data-end="2125" style="font-family: arial, sans-serif; font-size: 16px; line-height: 1; color: rgb(0, 0, 0);">Minimum 4+ years of experience in GRC, compliance, or information security</li><li data-start="1769" data-end="2125" style="font-family: arial, sans-serif; font-size: 16px; line-height: 1; color: rgb(0, 0, 0);">Hands-on experience with SOC 2 frameworks</li><li data-start="1769" data-end="2125" style="font-family: arial, sans-serif; font-size: 16px; line-height: 1; color: rgb(0, 0, 0);">Knowledge of HIPAA security requirements</li><li data-start="1769" data-end="2125" style="font-family: arial, sans-serif; font-size: 16px; line-height: 1; color: rgb(0, 0, 0);">Experience with compliance platforms such as Drata or similar</li><li data-start="1769" data-end="2125" style="font-family: arial, sans-serif; font-size: 16px; line-height: 1; color: rgb(0, 0, 0);">Strong policy writing and documentation skills</li><li data-start="1769" data-end="2125" style="font-family: arial, sans-serif; font-size: 16px; line-height: 1; color: rgb(0, 0, 0);">Ability to manage cross-functional stakeholders</li></ul>Preferred Requirement<ul><li data-start="2127" data-end="2329" style="font-family: arial, sans-serif; font-size: 16px; line-height: 1; color: rgb(0, 0, 0);">CISA, CISM, or CRISC certification</li><li data-start="2127" data-end="2329" style="font-family: arial, sans-serif; font-size: 16px; line-height: 1; color: rgb(0, 0, 0);">Experience in regulated or healthcare environments</li><li data-start="2127" data-end="2329" style="font-family: arial, sans-serif; font-size: 16px; line-height: 1; color: rgb(0, 0, 0);">Exposure to ISO 27001 or NIST frameworks</li><li data-start="2127" data-end="2329" style="font-family: arial, sans-serif; font-size: 16px; line-height: 1; color: rgb(0, 0, 0);">Experience managing external audits</li></ul>What We Offer<ul><li style="font-family: arial, sans-serif; font-size: 16px; line-height: 1; color: rgb(0, 0, 0);">Full benefits package including medical, vision, dental, 401(k) with company match, PTO, Flex days, holidays, and more</li><li style="font-family: arial, sans-serif; font-size: 16px; line-height: 1; color: rgb(0, 0, 0);">Working in Madeira in a shared office space, remote in Portugal, or remote in a Portuguese timezone-friendly location.</li><li style="font-family: arial, sans-serif; font-size: 16px; line-height: 1; color: rgb(0, 0, 0);">Opportunity to build and own compliance programs from the ground up</li><li style="font-family: arial, sans-serif; font-size: 16px; line-height: 1; color: rgb(0, 0, 0);">High-impact role supporting company-wide security and regulatory initiatives</li><li style="font-family: arial, sans-serif; font-size: 16px; line-height: 1; color: rgb(0, 0, 0);">Benefits package designed to meet local market standards and legal requirements. This may include health coverage, paid time off, holidays, and retirement contributions, depending on your location.</li></ul>Allia Health Group does not provide employment visa sponsorship now or in the future. Applicants must be legally authorized to work in the United States without the need for current or future sponsorship.Equal Opportunity Employer Statement Allia Health Group is proud to be an Equal Opportunity Employer where we are committed to fostering a diverse and inclusive workplace. We are committed to cultivating a culture where all team members feel valued & respected. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender identity or expression, sexual orientation, national origin, genetic information, disability, age, veteran status, or any other characteristics protected by applicable law.If you have any questions or require immediate assistance or accommodations during the application or interview process, please contact us at <a data-start="3770" data-end="3795" rel="noopener" target="_blank" style="color: rgb(0, 0, 0);">recruiting@alliahealth.co</a>. </div>

Apply Now

Remote Opportunity

GRC Analyst

Join AP MAX INC as a mid professional working remotely from Portugal. Explore the role, benefits, and apply in one place.

GRC Analyst

AP MAX INC

Full Time

$80,000 - $120,000*

7 months ago

Company Overview At Allia Health Group, the umbrella organization for Southend Pharmacy, Brello Health, and Woven, we don’t just follow industry trends—we redefine them.

Portugal

Finance

Mid

GRC

Compliance

Information Security

+5 more

Job Description

Company Overview
At Allia Health Group, the umbrella organization for Southend Pharmacy, Brello Health, and Woven, we don’t just follow industry trends—we redefine them. Our mission is to commoditize anti-aging solutions, making them affordable and accessible to the average consumer—not just the wealthy. By offering customized and cost-effective wellness products that follow cost-containment models, we aim to improve people’s quality of life and meet them wherever they are on their health journey.

Job Summary
The GRC Analyst will lead and operationalize the organization’s SOC 2 compliance program while supporting broader governance, risk, and compliance initiatives. This role is responsible for building policies, managing compliance frameworks, and ensuring audit readiness across the organization.The ideal candidate is hands-on, detail-oriented, and capable of driving cross-functional alignment across technical and business teams.

Key Responsibilities

Lead SOC 2 Type 1 gap assessment and readiness initiatives
Develop and maintain information security policies and procedures
Manage compliance platform and control evidence collection
Execute HIPAA compliance initiatives and maintain documentation
Maintain risk register and conduct regular risk assessments
Manage vendor security reviews and assessments
Partner with engineering teams to align technical controls with compliance requirements
Serve as primary point of contact for external auditors

What We Require

Minimum 4+ years of experience in GRC, compliance, or information security
Hands-on experience with SOC 2 frameworks
Knowledge of HIPAA security requirements
Experience with compliance platforms such as Drata or similar
Strong policy writing and documentation skills
Ability to manage cross-functional stakeholders

Preferred Requirement

CISA, CISM, or CRISC certification
Experience in regulated or healthcare environments
Exposure to ISO 27001 or NIST frameworks
Experience managing external audits

What We Offer

Full benefits package including medical, vision, dental, 401(k) with company match, PTO, Flex days, holidays, and more
Working in Madeira in a shared office space, remote in Portugal, or remote in a Portuguese timezone-friendly location.
Opportunity to build and own compliance programs from the ground up
High-impact role supporting company-wide security and regulatory initiatives
Benefits package designed to meet local market standards and legal requirements. This may include health coverage, paid time off, holidays, and retirement contributions, depending on your location.

Allia Health Group does not provide employment visa sponsorship now or in the future. Applicants must be legally authorized to work in the United States without the need for current or future sponsorship.

Equal Opportunity Employer Statement
Allia Health Group is proud to be an Equal Opportunity Employer where we are committed to fostering a diverse and inclusive workplace. We are committed to cultivating a culture where all team members feel valued & respected. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender identity or expression, sexual orientation, national origin, genetic information, disability, age, veteran status, or any other characteristics protected by applicable law.

If you have any questions or require immediate assistance or accommodations during the application or interview process, please contact us at recruiting@alliahealth.co.

Requirements

Minimum 4+ years of experience in GRC, compliance, or information security
Hands-on experience with SOC 2 frameworks
Knowledge of HIPAA security requirements
Experience with compliance platforms such as Drata or similar
Strong policy writing and documentation skills
Ability to manage cross-functional stakeholders

Benefits

Vision Insurance
Dental Insurance
Pay in Crypto

Skills

GRC

Compliance

Information Security

SOC 2

HIPAA Compliance

Risk Assessment

Vendor Security Reviews

Policy Writing

About AI-Estimated Salary

The salary range shown was not provided by the employer. Our AI has estimated it based on the job title, required experience, location, and industry standards (confidence: 80%). This estimate should be used as a general guide only and may not reflect the actual compensation. Always confirm salary details directly with the employer during the application process.

Ready to Apply?

Join AP MAX INC today

Salary Range (AI-Estimated)*

$80,000 - $120,000

80% confidence

Posted 7 months ago

Explore more remote openings

Browse fresh listings from our global community of remote-friendly teams.

Senior Application Security Engineer

MBL Technologies

Full Time

1 hour ago

MBL Technologies, Inc. offers a diverse set of management and technology consulting services to Federal government and commercial markets. Our solutions are tailored to support each client’s mission, accounting for their unique needs and operating environments to ensure success.

United States

Engineering

Security Engineering

Senior

Static Application Security Testing

Dynamic Application Security Testing

Veracode

+5 more

Senior Application Security Engineer

MBL Technologies

Full Time

1 hour ago

United States

Engineering

Security Engineering

Senior

Static Application Security Testing

Dynamic Application Security Testing

Veracode

+5 more

Corporate Recruiter LATAM Contractor

Wetherill Associates Inc

Full Time

1 hour ago

Join WAI’s Global Growth Journey WAI is growing—and we are looking for a talented Corporate Recruiter to help us build the teams that will shape our future.

United States

Design

Product Design

Senior

full-cycle recruitment

Sourcing strategies

Candidate Screening

+5 more

Corporate Recruiter LATAM Contractor

Wetherill Associates Inc

Full Time

1 hour ago

Join WAI’s Global Growth Journey WAI is growing—and we are looking for a talented Corporate Recruiter to help us build the teams that will shape our future.

United States

Design

Product Design

Senior

full-cycle recruitment

Sourcing strategies

Candidate Screening

+5 more

E-Commerce Developer

Aradius Group

Full Time

3 hours ago

E-Commerce Developer – Job Description At Aradius Group, we’re continuing to expand how we help clients manage, order, and distribute their print and marketing materials through customized e-commerce solutions.

United States

Engineering

Backend Engineering

Mid

HTML

CSS

Front-end development

+5 more

Caregiver Operations & Support Specialist

ACCRA Management Group LLC

Full Time

$0.022k - $0.023k

4 hours ago

At Accra, our mission is to improve lives by providing individualized homecare services and support to people living at home. We foster an environment where every employee is respected, celebrated, and encouraged to bring their whole self to work. Why Work at Accra?

United States

Operations

Entry

Payroll processing

Data entry

Customer Service

+5 more

Application Developer

TRILLIUM HEALTH RESOURCES

Full Time

$92.776k - $114.061k

4 hours ago

Pay Plan Title: Application Developer Working Title: Application Developer Position Number: 13029 FLSA Status: Exempt Posting Salary Range: $92,776 - $114,061 Office Location: Remote within the United States.

United States

Engineering

Backend Engineering

Senior

Power Platform

Power Apps

Power Automate

+5 more

Associate Director, Scientific Communications

Edgewise Therapeutics

Full Time

$175k - $205k

4 hours ago

At Edgewise, we are focused on advancing novel, muscle-targeted therapeutics for serious cardiovascular and cardiometabolic conditions with significant unmet need.

United States

Engineering

Backend Engineering

Senior

Scientific Communications

Medical Writing

Medical Affairs

+5 more

Senior Embedded Software Engineer

Quest Defense Systems & Solutions, Inc.

Full Time

$130k - $155k

4 hours ago

Engineers are the reason we exist—they’re the core of who we are. We don’t just build technology; we engineer the future. From next-gen aerospace to cutting-edge defense systems, our teams power the solutions that drive innovation, tackle mission-critical challenges, and keep people safe.

Worldwide

Engineering

Backend Engineering

Senior

Embedded software development

Object-Oriented Design

+5 more

Embedded Software Engineer

Quest Defense Systems & Solutions, Inc.

Full Time

$110k - $145k

4 hours ago

Worldwide

Engineering

Backend Engineering

Mid

Embedded software development

Object-Oriented Design

+5 more

Embedded Software Engineer

Quest Defense Systems & Solutions, Inc.

Full Time

$110k - $145k

4 hours ago

Worldwide

Engineering

Backend Engineering

Mid

Embedded software development

Object-Oriented Design

+5 more

New Business Account Executive (Dutch market)

Vivid

Full Time

€100k - €120k

4 hours ago

About The Role Vivid Money is redefining how modern corporates, holding structures, and financial institutions manage and optimize their capital. From institutional-grade Treasury products (high-yield Interest Accounts, Money Market Funds, and ETFs) to multi-currency infrastructure and FX…

Spain

Sales

Account Executive

Senior

B2B Sales

Institutional sales

Financial Services

+5 more