Senior GRC & Compliance Manager

Job Summary

Owning and operating the company's security compliance program, the full-time remote Senior GRC & Compliance Manager will manage external audits, control management, and remediation tracking while establishing a year-round compliance framework.

Key responsibilities

• Lead operational execution for SOC 2, ISO 27001, HITRUST, FISMA, HIPAA, and PCI-DSS compliance activities across the organization
• Coordinate evidence requests and manage auditor interactions to ensure timely and accurate submissions
• Maintain compliance documentation and develop processes for continuous improvement and annual compliance management

Required qualifications

• 5+ years of experience in information security governance, risk, compliance, or audit
• Hands-on experience managing SOC 2 or comparable security audits
• Strong understanding of security and IT controls across various domains
• Experience coordinating control activities across technical and business teams
• Strong project and program management skills with the ability to manage deadlines and escalations