Executive Director, Governance Risk & Compliance
Core
Provides enterprise leadership for security risk and compliance by setting strategy, owning GRC outcomes, and ensuring regulatory alignment across the company and its subsidiaries.
Role type
Executive Director, Governance Risk & Compliance (GRC)
Builds
Enterprise GRC framework, attestations, and certifications (SOX, HIPAA, HITRUST)
Domain
Healthcare / Information Security / Regulatory Compliance
Required skills
Enterprise GRC program leadership, Security policy governance, Third-party risk management, Threat and vulnerability management, Executive briefing, Budget stewardship, Cross-functional alignment
Preferred skills
Regulatory regime expertise (HIPAA/HITRUST/SOX), Enterprise control frameworks (NIST CSF/800-53, ISO 27001)
Responsibilities
Setting enterprise security risk and compliance strategy, Leading enterprise attestations and certifications, Governing security policy and exceptions, Overseeing threat and vulnerability management, Managing security awareness initiatives, Driving cross-functional alignment with Legal, Compliance, IT, and Business stakeholders
Seniority
Executive, multi-team leadership
