Senior Director of Information Risk & Governance

📋 Description

• Lead cross-functional governance programs for information risk and enterprise risk management.
• Own risk registers, risk appetite, and risk-acceptance processes; produce executive and board
• Coordinate AI governance, data governance, incident management, and third-party risk programs.
• Align risk decisions with business strategy, product launches, and enterprise deals.
• Partner with Security, Legal, Privacy, Compliance, Sales, Procurement, and Product teams to

🎯 Requirements

• 10+ years in information-security risk management, governance, or GRC; 5+ years in regulated PHI
• Strong experience with SOC 2, HITRUST, HIPAA security risk assessments, ISO 27001 readiness, and
• Deep knowledge of HIPAA Security Rule, NIST CSF 2.0, and AI governance expectations; comfort with
• Excellent cross-functional collaboration, decision-making, and executive communication skills.
• Experience with third-party risk programs and incident management governance.

🎁 Benefits

• Medical / Dental / Vision / Disability / Life Insurance
• HSA option with High Deductible Health Plan
• Flexible Spending Account (FSA)
• Coaches and therapists through Modern Health platform
• Time Off, Company-wide pause days, Parental leave benefits
• Professional development stipend and wellness programs