Senior Manager, Governance Risk Compliance

Job Summary

Leading the execution of the enterprise information security GRC program, the full-time Senior Manager, Governance Risk Compliance will manage security risk lifecycle activities, maintain governance policies, and oversee compliance audits in a remote environment.

Key responsibilities

• Operate and mature the enterprise GRC program aligned to the CISO's strategy and risk appetite
• Own the security risk lifecycle, including assessments, tracking, remediation, and escalation of material risks
• Manage security-related compliance activities and audits, maintaining evidence and tracking remediation

Required qualifications

• Bachelor's degree in Information Security, Cybersecurity, Information Systems, Computer Science, Business Administration, or a related field
• 7+ years of experience in information security GRC or risk management
• Strong knowledge of HIPAA Security rule, NIST CSF, ISO 27001, and SOC 2
• Experience with risk assessments, audits, and control testing
• Preferred certifications: CISSP, CISM, CRISC, CISA, or similar