Lead Governance, Risk and Compliance Manager
Core
Lead and mature enterprise security governance, risk management, regulatory compliance, and customer assurance programs for a healthcare AI/ML organization.
Role type
Senior IC GRC Manager (Healthcare/AI)
Builds
Scalable GRC processes, compliance certifications (HITRUST, HIPAA, ISO 27001), customer trust materials, and risk management frameworks.
Domain
Healthcare technology, SaaS, AI/ML, highly regulated environments
Required skills
GRC program leadership, enterprise GRC platforms (Vanta, ZenGRC, etc.), HITRUST/HIPAA/ISO 27001 compliance, customer security assurance, risk management, contractual security review, executive reporting
Preferred skills
NIST frameworks, GRC platform administration, Security Trust Center design, project management
Technologies
Vanta, Anecdotes, ZenGRC, Drata, ServiceNow GRC, HITRUST, HIPAA, ISO 27001, NIST CSF, NIST AI RMF
Responsibilities
Lead GRC program maturity and certification initiatives; manage enterprise GRC platforms and automation; oversee risk assessments and remediation; conduct customer security due diligence and audits; develop executive reporting and dashboards; negotiate security contractual requirements.
Seniority
Senior, hands-on IC
