Risk and Compliance Associate

Location:Remote Job Type:Full-time About Us! At Ready Computing , we specialize in data-centric IT solutions that help organizations across healthcare, supply chain, finance, and manufacturing optimize their technology and data strategies. With offices in the U.S. and the UK, we provide expert consulting, development, and managed services to clients worldwide. We're committed to hiring top talent to drive innovation, particularly in the healthcare IT space. As part of our commitment, we are seeking a highly organized, detail-oriented, and process-driven Risk and Compliance Associate to join our centralized Compliance and Risk Management team. Ready Computing operates a mature, certified Integrated Management System (IMS) spanning ISO 9001:2015, ISO/IEC 20000-1:2018, ISO/IEC 27001:2022, HITRUST CSF r2, as well as several other major standards and frameworks. As a Virtual-First enterprise, our compliance operations are cloud-native and deeply integrated into our technical and business lifecycles. The successful candidate will serve as the administrative engine of our daily compliance workflows. This role requires a unique blend of exceptional administrative rigor, advanced document control skills, clear communication, and a systematic, logical approach to process execution, providing critical operational and administrative support across our core Compliance programs. Your contributions will directly support our leadership team, ensuring our systems of record remain accurate, auditable, and resilient. What you'll do The Risk and Compliance Associate is responsible for the day-to-day administrative execution and record-keeping across our core program areas. The role acts as a collaborative, supportive partner enabling the compliance success of all internal business units. Integrated Document and Knowledge Lifecycle This is a primary operational focus requiring advanced-level mastery of document styling, structure, and lifecycle tracking per Company policies and our internal IMS Documentation Writing Standard: Advanced Templating and Re-Templating: Standardize, format, and convert legacy documentation and templates utilizing Microsoft Word with meticulous precision. Documentation Triage and Initial Revision: Monitor incoming documentation requests. Perform initial intake, analyze request details, and execute first-pass document drafts incorporating specific request parameters. Actively follow up with requesters to clarify ambiguous instructions. Inconsistency and Gap Identification: Review draft policies, plans, and procedures to identify logical gaps, mutual exclusivities, legacy or obsolete parameters, and misalignments between external compliance matrices and internal documentation. Process Integrity Tracking: Map and verify the end-to-end integrity of procedures from the core business purpose, required inputs, step-by-step technical execution, to the final expected output and evidence generation. DCML and Repository Synchronization: Maintain the authoritative Document Control Master List with absolute accuracy. Enforce strict File Naming Conventions (FNC) and version control standards across all shared drives and directories. Cycle and Queue Reporting: Manage the annual revision cycles by proactively alerting document owners of upcoming review deadlines. Run-down and report on active documents in the queue to maintain administrative momentum. Post-Implementation Review Facilitation: Schedule and participate in post-implementation team meetings following major document releases to review, document, and learn from what changed and why. Internal and External Service Requests Manage the incoming queue of security, compliance, and regulatory requests from both internal departments and external clients: Triage and Assignment: Provide immediate intake, triage, and prioritization of incoming requests. Write clear, actionable notes and context to assist technical SMEs prior to ticket routing. Initial Questionnaire Drafting: Coordinate external client security and compliance questionnaires. Execute initial first-pass drafting of answers utilizing the GRC platform and standard answer libraries, completing responses as far as possible before escalating to secondary specialists. Queue Visibility Reporting: Generate and maintain active reports on support tickets and questionnaires in queue to ensure complete visibility and strict SLA compliance. Non-Conformance and Corrective Actions Support the closed-loop tracking of compliance "misses" or process deviations per Company policies: NCAR Logging and Tracking: Maintain the central NCAR and Actions Log with meticulous accuracy. Log new non-conformances identified during internal audits, quality assurance reviews, or client feedback. Form Facilitation: Initiate and coordinate the completion of formal NCAR Forms (QMS FORM-0014) with process owners. Remediation Follow-Up: Proactively track the status of approved Corrective Action Plans (CAPs) and follow up with owners across all levels of the organization to guarantee timely closure of action items. Performance Monitoring, Measurement, and MRMs Support data-driven compliance reviews and reporting: KPI Data Collection: Coordinate with Key Performance Indicator (KPI) and metric owners across the business on a monthly and quarterly basis to gather performance data. Metric Consolidation: Port and aggregate raw data into our centralized GRC systems and performance reports, conducting initial validation checks to ensure data completeness and integrity. Management Review Inputs: Formally coordinate administrative logistics for quarterly Management Review Meetings (MRMs). Prepare and draft 2 to 3 specific slides within the MRM presentation deck—focusing specifically on KPIs, training metrics, and program-level data within your direct purview. Log and track post-MRM action items. Governance, Risk, and Privacy Program Operations Execute routine administrative support to ensure the integrity of our core governance prog