Security GRC Manager

📋 Description

• Lead the GRC function: Manage and mentor a small GRC team, establish priorities, review
• Own compliance frameworks: Maintain and improve a unified control library mapped to SOC 1, SOC 2
• Manage audits and attestations: Lead preparation, evidence collection, and coordination for SOC 1
• Oversee privacy and data protection: Partner with Legal on HIPAA/HITECH compliance, business
• Develop AI governance: Mature an AI governance program aligned with ISO/IEC 42001 principles
• Review security and privacy contracts: Assess and negotiate customer and vendor contract provisions

🎯 Requirements

• Relevant experience: 5–10 years of professional experience in governance, risk, compliance
• Professional certification: An active, relevant certification such as CISSP, CISA, or CISM.
• Compliance leadership: Direct experience leading SOC 2 and HITRUST CSF certification or attestation
• AI governance knowledge: Familiarity with AI governance frameworks such as ISO/IEC 42001 and the
• Team management: Experience leading or mentoring GRC analysts, setting priorities, reviewing work
• Healthcare privacy expertise: Strong understanding of risk assessment methodologies, HIPAA, and

🎁 Benefits

• Annual base salary: $144,000–$175,000.
• Additional compensation: Eligible for bonus compensation and equity in addition to base salary.
• Remote work: Remote position with location-based compensation considerations.
• Compensation flexibility: Final compensation is determined by geographic location, experience, and
• Other benefits: Specific healthcare coverage, retirement plans, paid time off, and additional perks