GRC Engineer

Job description

About Us TherapyNotes is the go-to superhero for behavioral health Practice Management and EHR software! Our top-notch SaaS solution handles scheduling, billing, documenting, telehealth, and more so clinicians can focus on awesome patient care. We're a dynamic team of pros who love to innovate and push the envelope, keeping our software cutting-edge. Join us, and let's revolutionize behavioral health software together while making a real difference! About The Position: TherapyNotes is seeking a GRC Engineer who combines strong foundational GRC expertise with the ability to design and implement scalable, automated solutions. This role is responsible for both executing core GRC functions (e.g., risk assessments, policy management, third-party risk) and transforming those processes through engineering and automation. The ideal candidate understands how GRC work is performed today—and has the technical skills to improve, scale, and modernize it. What You'll Do: Core GRC Operations (Hands-On Execution): - Conduct third-party risk assessments (TPRM), including vendor reviews, security questionnaires, and risk evaluations - Maintain and update security policies, standards, and procedures...