GRC Manager

Job Summary

To ensure strong compliance controls across various healthcare standards, the full-time remote GRC Manager will develop and maintain the organization's enterprise GRC program while collaborating with multiple departments to manage compliance obligations and reduce organizational risk.

Key responsibilities

• Develop and continuously improve the enterprise GRC program, ensuring compliance with HIPAA, HITRUST, SOC 2, and PCI-DSS
• Conduct enterprise risk assessments and maintain the organizational risk register, presenting risk metrics to senior leadership
• Establish an AI governance framework for responsible use of artificial intelligence in healthcare operations

Required qualifications

• Bachelor's degree in Information Security, Cybersecurity, Information Systems, Business, or a related field, or equivalent experience
• 6-8+ years of experience in Governance, Risk, and Compliance, with demonstrated experience managing SOC 2, HITRUST, and PCI DSS
• Experience leading external audits and remediation efforts
• Strong understanding of information security principles and risk management
• Project Management experience and familiarity with GRC platforms