Security GRC Manager

Leading a small GRC team, the full-time remote Security GRC Manager will enhance policies and procedures, manage risk programs, and oversee compliance audits while maturing the organization's governance, risk, and compliance function. Key responsibilities Lead and mentor the GRC team, setting priorities and reviewing work to grow the function Own and evolve the unified control library, maintaining mappings across SOC 2, SOC 1, and HITRUST Manage the audit program for control requirements in collaboration with Engineering, IT, People, and Finance Required qualifications 5-10 years of relevant work experience in governance, risk, and compliance Certification relevant to the role (e.g., CISSP, CISA, CISM) Experience leading SOC 2 with HITRUST CSF certification in a high-growth environment Familiarity with AI governance frameworks, particularly ISO/IEC 42001 Deep understanding of risk assessment methodologies, HIPAA, and HITECH regulations