Lead Governance, Risk and Compliance Manager
New
C
Cohere HealthHealthcare technology
Location: United StatesFull-TimeManager
Salary133,000 - 145,000 USD per year
Apply NowOpens the employer's application page
Job Details
- Experience
- 8+ years of progressive experience in information security, governance, risk management, compliance, or IT audit, including 2+ years leading GRC initiatives, programs, and/or teams.
- Required Skills
- HIPAA
Requirements
- Have 8+ years of progressive experience in information security, governance, risk management, compliance, or IT audit.
- Have 2+ years leading GRC initiatives, programs, and/or teams.
- Hold professional certifications such as CISM, CISSP, CRISC, CISA, CGRC, or HITRUST CCSFP.
- Bring working knowledge of HITRUST, ISO 27001, and HIPAA, including assessment management, control implementation, audit coordination, and certification readiness.
- Have experience deploying and administering enterprise GRC platforms, including workflow design, control mapping, evidence collection, reporting, and automation.
- Be familiar with the NIST Cybersecurity Framework, NIST AI Risk Management Framework, ISO 27017, ISO 27018, ISO 42001, and privacy-related security requirements.
- Understand enterprise risk management, including risk registers, control assessments, risk treatment plans, vulnerability remediation SLAs, and exception management.
- Demonstrate project and program management skills, including concurrent initiatives, operational roadmaps, KPIs, and independent delivery.
- Have experience leading customer assurance programs, security questionnaires, customer-facing meetings, due diligence reviews, and enterprise customer responses.
- Have experience with GRC platforms such as Vanta, Anecdotes, ZenGRC, Drata, or ServiceNow GRC.
- Have experience developing GRC maturity models, executive scorecards, and risk-based reporting frameworks.
- Bring experience reviewing and redlining security exhibits, DPAs, BAAs, and customer agreements with Legal, and designing or administering a customer-facing Security Trust Center.
Responsibilities
- Lead and mature Cohere’s GRC program, establishing governance processes, operating procedures, risk practices, and performance indicators.
- Deploy, configure, and optimize enterprise GRC platforms, including control mapping, evidence automation, risk registers, monitoring, and compliance reporting.
- Direct HITRUST, HIPAA, ISO 27001, and applicable regulatory compliance and certification initiatives.
- Lead customer assurance activities, including security questionnaires, due diligence, customer audits, executive briefings, and security discussions.
- Partner with Sales, Customer Success, and Marketing on security-focused go-to-market materials and the customer-facing Trust Center.
- Review and negotiate security-related contractual requirements with Legal, including DPAs, BAAs, security exhibits, and customer obligations.
- Oversee risk assessments, remediation tracking, exception management, and vulnerability remediation SLAs across technical teams.
- Govern identity and access compliance, including access reviews, privileged access certifications, and segregation of duties.
- Develop executive presentations, dashboards, and reporting on compliance, risk, remediation, customer assurance, and program maturity.
- Build and scale the GRC function, develop team capabilities, manage external assessors and partners, and drive continuous improvement.
View Full Description & ApplyYou'll be redirected to the employer's site
