GRC Analyst at Artera

Los Angeles, California, United States

Not SpecifiedCompensation

Mid-level (3 to 4 years)Experience Level

Full TimeJob Type

UnknownVisa

Healthcare, Digital Health, SaaS, FederalIndustries

Requirements

4+ years of experience in security, GRC, or a related technical/compliance role
Must be eligible to obtain and maintain a U.S. government security clearance to support work across both commercial and federal programs
Familiarity with compliance (inferred from context of GRC and FedRAMP)

Responsibilities

Support the ongoing maintenance of our FedRAMP High continuous monitoring program, including evidence collection and reporting
Track, review, and document vulnerability scan data; ensure remediation efforts are auditable and timely
Manage security-related tickets and cases in systems like Jira, SharePoint, and internal documentation tools
Collaborate with Engineering, DevOps, IT, and Privacy to collect data, verify controls, and support audit readiness
Answer auditor and federal agency questions by compiling and submitting relevant documentation
Identify manual or repetitive processes and propose automation opportunities (scripts, tools, templates, etc.)
Conduct internal access reviews, policy checks, and other posture assessments across systems
Help build scalable documentation, workflows, and templates to reduce audit fatigue
Contribute to security roadmap planning by identifying gaps or inefficiencies in current processes
Stay current on security trends and evolving standards relevant to federal and commercial compliance

Skills

Key technologies and capabilities for this role

GRCInformation SecurityComplianceRisk ManagementFedRAMPNISTSecurity ControlsAuditPolicy Development

Questions & Answers

Common questions about this position

What is the salary range for the GRC Analyst position?

This information is not specified in the job description.

Is this GRC Analyst role remote or does it require office work?

This information is not specified in the job description.

What skills are required for the GRC Analyst role?

Prior FedRAMP experience is strongly preferred, though not required. The role requires curiosity, initiative, a desire to grow, and enjoyment of technical systems, risk management, process improvement, automation, and collaborative problem-solving.

What is the company culture like at Artera?

Artera has an award-winning culture, consistently recognized as a top place to work with accolades like Inc. 5000 Fastest Growing Private Companies, Deloitte Technology Fast 500, Built In Best Companies to Work For, Forbes’ America’s Best Startup Employers, and more.

What makes a strong candidate for the GRC Analyst position?

A strong candidate has prior FedRAMP experience (preferred), curiosity, initiative, and a desire to grow, enjoys technical systems and risk management, and is motivated by process improvement, automation, and collaborative problem-solving.

Artera

SaaS digital health messaging integration platform

About Artera

Artera is a compelling workplace due to its critical role in improving healthcare communication, orchestrating over 2.2 billion messages annually across diverse channels like texting, email, and webchat. The company not only facilitates efficient healthcare staff operations and profitability for organizations but also enhances overall patient experience by supporting services in over 109 languages. This broad impact in healthcare through high-level integration with EHRs and third-party vendors positions Artera as a leader in the digital health sector.

Santa Barbara, CaliforniaHeadquarters

2015Year Founded

$148.4MTotal Funding

SERIES_CCompany Stage

AI & Machine Learning, HealthcareIndustries

201-500Employees