IT Governance Risk Compliance Director

Job Summary

To lead the company's IT risk, compliance, and control strategy, the full-time remote IT Governance Risk Compliance Director will develop governance frameworks, assess compliance maturity, and establish policies for AI adoption while ensuring alignment with regulatory standards such as SOC 2, HIPAA, and GDPR.

Key responsibilities

• Define and oversee governance, risk, and compliance policies for secure access and remote work environments
• Assess current controls and develop strategies to strengthen compliance maturity and audit readiness
• Create governance frameworks and risk controls for AI adoption, ensuring compliance with healthcare regulations

Required qualifications

• Bachelor's degree in computer science, engineering, information systems, or a related field; advanced degree preferred
• 10+ years of experience in IT security, compliance, risk management, or GRC leadership roles
• Expertise in major security and privacy frameworks such as SOC 2, ISO 27001, HIPAA, and GDPR
• Experience with risk-based controls related to AI use cases, including privacy safeguards and vendor oversight
• Strong executive presence with the ability to influence stakeholders across various functions