Governance, Risk, Compliance (GRC) Analyst

Sword Health is on a mission to free two billion people from pain as the world’s first and only end-to-end platform to predict, prevent and treat pain. 

Delivering a 62% reduction in pain and a 60% reduction in surgery intent, at Sword, we are using technology to save millions for our 2,500+ enterprise clients across three continents. Today, we hold the majority of industry patents, win 70% of competitive evaluations, and have raised more than $300 million from top venture firms like Founders Fund, Sapphire Ventures, General Catalyst, and Khosla Ventures.

Recognized as a Forbes Best Startup Employer in 2023, this award highlights our focus on being a destination for the best and brightest  talent. Not only have we experienced unprecedented growth since our market debut in 2020,  but we’ve also created a remarkable mission and value-driven environment that is loved by our growing team. With a recent valuation of $2 billion, we are in a phase of hyper growth and expansion, and we’re looking for individuals with passion, commitment, and energy to help us scale our impact. 

Joining Sword Health means committing to a set of core values, chief amongst them to “do it for the patients” every day, and to always “deliver more than expected” on behalf of our members and clients.

This is an opportunity for you to make a significant difference on a massive scale as you work alongside 800+ (and growing!) talented colleagues, spanning two continents. Your charge? To help us build a pain-free world, powered by technology, enhanced by people — accessible to all.

What you'll be doing:

• Working closely with the Director of Risk and Compliance to continuously improve Sword’s GRC programs;
• Conducting periodic reviews and working with other teams to improve periodic review processes;
• Participating in risk assessments and risk assessment reviews;
• Participating in internal and external audits for current and future Compliance initiatives;
• Improving processes related to security questionnaires and client security assessments.

What you need to have:

• 3+ years of experience in Information Security certifications;
• Experience working with security-related certifications (PCI-DSS, SOC 2, HITRUST, ISO 27001, FedRamp);
• Strong analytical and problem-solving skills;
• Strong attention to detail;
• Excellent written and verbal communication skills;
• Basic knowledge of relevant laws and regulations;
• Ability to learn quickly and adapt to new information.

What we would love to see:

• Understanding of Compliance management principles and concepts;
• Understanding of Risk management principles and concepts;
• Understanding of governance, risk, and compliance regulations and standards.

To ensure you feel good solving a big Human problem, we offer:

• A stimulating, fast-paced environment with lots of room for creativity;
• A bright future at a promising high-tech startup company;
• Career development and growth, with a competitive salary;
• The opportunity to work with a talented team and to add real value to an innovative solution with the potential to change the future of healthcare;
• A flexible environment where you can control your hours (remotely) with unlimited vacation; 
• Access to our health and well-being program (digital therapist sessions);
• Remote or Hybrid work policy (Portugal only);
• To get to know more about our Tech Stack, check here.