GRC Specialist - Remote

Overview

Our mission at Oura is to empower every person to own their inner potential. Our award-winning products help our global community gain a deeper knowledge of their readiness, activity, and sleep quality by using their Oura Ring and its connected app. We've helped 2.5 million people understand and improve their health by providing daily insights and practical steps to inspire healthy lifestyles.

Empowering the world starts with living our values and empowering our team. As a quickly growing company focused on helping people live healthier and happier lives, we ensure that our team members have what they need to do their best work — both in and out of the office.

We are seeking a GRC Specialist to join our Security Team. This role will serve as a subject matter expert (SME) supporting compliance, risk, and governance initiatives. Working alongside the Governance Risk and Compliance Team, the GRC Specialist will help mature our security and compliance programs such as SOC 2, HIPAA, ISO27001, ISO27799, HITRUST, NIST 800-171, CMMC, and FedRAMP.

In Short

• Assist with internal and external audits (SOC 2, HIPAA, HITRUST), including evidence collection, process documentation, and remediation tracking.
• Draft, update, and maintain security and compliance policies to align with regulatory requirements and industry best practices.
• Collaborate with Product, Engineering, and Privacy teams to assess security risks in new product features, infrastructure changes, and business processes.
• Review client and vendor contracts to assess security and compliance requirements.
• Perform risk assessments, track remediation efforts, and collaborate with stakeholders to mitigate security and compliance risks.
• Conduct vendor risk assessments, evaluate security controls, and support contract security reviews.
• Conduct user access audits, assess RBAC effectiveness, and improve offboarding controls.

Requirements

• Hands-on experience implementing compliance frameworks.
• Experience conducting risk assessments.
• Experience supporting audits.
• Ability to develop policies that drive security and business alignment.

Benefits

• Opportunity to work in a mission-driven company.
• Supportive team culture focused on health and well-being.
• Access to innovative products that enhance personal health.