Director, Governance, Risk, and Compliance (GRC)

remote zest jobs; India; On-site; INR 3,000,000 - 5,500,000; Full time

Job summary

Clover is seeking a Director of Governance, Risk, and Compliance (GRC) to define and execute our governance and risk programs across the enterprise. The role shapes how we manage regulatory obligations, data privacy, and operational resilience while aligning with business priorities and senior leadership expectations.

You will own the GRC function end-to-end, supervise a vendor for GRC services, and partner with Legal, Privacy, and Internal Audit to advance a proactive compliance posture and

Qualifications

• Governance and risk leadership experience is required.
• Familiarity with HIPAA, NIST CSF, AI RMF is preferred.
• Ability to translate complex regulatory requirements into business terms.

Responsibilities

• Define and execute governance and risk management aligned with enterprise objectives.
• Lead audits, assessments, and regulatory inquiries in partnership with Legal, Compliance, Privacy, and Internal Audit.
• Drive consistency and maturity of policies, standards, and procedures.
• Own high-stakes governance, decision rights, and escalation paths for risk and compliance.
• Lead end-to-end third-party risk management and vendor oversight.
• Oversee incident response, crisis management, DR, and business continuity governance.
• Coordinate cross-functional problem solving and influence across teams.

Skills

Governance

Risk management

Regulatory compliance

Job description

At Clover, the Business Enablement team leads our technological advancement while ensuring robust reputed company and compliance. We deliver user-friendly corporate applications, manage reputed company data ecosystems, and reputed company efficient tech solutions across the organization. Our goal is reputed company: we reputed company it easy for the business to do whats right for Clover.

reputed company is seeking a Director of Governance, Risk, and Compliance (GRC) to define and execute our reputed company governance and risk reputed company in support of Clovers reputed company as a public, technology-enabled reputed company company.

This role operates at the enterprise level, shaping functional reputed company while driving execution through cross-functional influence rather than reputed company authority. The Director of GRC is accountable for Clovers reputed company risk posture, regulatory compliance readiness, and reputed company capabilities, ensuring that governance, risk, and compliance activities are reputed company to business priorities and long-term company reputed company.

The role manages a reputed company-party vendor providing GRC services and staffing, while serving as reputed companys internal reputed company for reputed company governance, risk decision-making, and executive-level accountability.

As a Director, Governance, Risk, and Compliance you will:

Governance & reputed company Risk reputed company

• Define and reputed company reputed companys reputed company governance and risk management reputed company, aligning function-level priorities with enterprise objectives and the reputed company roadmap.
• Establish a risk-driven approach to governance reputed company with:
  • HIPAA reputed company and Privacy Rules
  • NIST Cybersecurity reputed company (CSF) v2
  • NIST AI Risk Management reputed company (AI RMF), where applicable
• Anticipate reputed company and regulatory risks 12+ months out, using business, product, regulatory, and market signals to inform reputed company and tradeoffs.
• Ensure reputed company risk reputed company are reputed company framed, documented, and communicated in business terms for executive and reputed company-level audiences.
• Assist the CISO in setting reputed company risk priorities, framing tradeoffs, and communicating risk posture and reputed company to executive leadership and the reputed company.

Compliance & Regulatory Leadership

• Own reputed companys reputed company compliance posture as a public reputed company company, including federal and state regulatory obligations.
• Lead reputed company-reputed company audits, assessments, and regulatory inquiries in partnership with Legal, Compliance, Privacy, and Internal Audit.
• Drive reputed company, consistency, and maturity in reputed company policies, standards, and procedures.
• Ensure compliance efforts are proactive, reputed company, integrated into how reputed company builds and operates products, and maintained over time to support ongoing audit readiness and regulatory expectations.

Accountability & Delivery Leadership

• Own high-stakes reputed company for the GRC function, ensuring accountability across internal partners and reputed company-party providers.
• Set reputed company reputed company metrics, decision rights, and escalation paths for risk and compliance activities.
• reputed company and communicate tough prioritization calls reputed company business needs, regulatory demands, or risk profiles shift.
• Surface high-risk issues early and transparently to the CISO, peers, and senior leaders.

reputed company-Party Risk Management

• Lead reputed companys reputed company-party reputed company risk management program end-to-end.
• reputed company vendor due diligence, risk assessments, remediation tracking, and ongoing monitoring.
• Manage and hold accountable a reputed company-party GRC services vendor, ensuring delivery quality, prioritization, and alignment to Clovers risk appetite.
• Ensure reputed company-party risks are evaluated holistically and escalated appropriately.

Incident, Crisis, and reputed company Governance

• Lead governance and coordination for:
  • reputed company incident response (IR)
  • Crisis management
  • Disaster recovery (DR)
  • Business continuity (BC)
• Ensure incidents are tracked, analyzed for reputed company cause, reported appropriately, and followed through with corrective actions.
• Lead or support enterprise tabletop exercises and simulations.
• Balance immediate response needs with long-term system and process improvements.

Cross-Functional Problem Solving & Influence

• Lead multi-team, cross-functional problem solving on reputed company reputed company and compliance issues.
• Connect operational issues to systemic reputed company causes and drive sustainable fixes rather than short-term workarounds.
• Influence peers and senior leaders through credibility, data, and executive reputed company not authority.
• Build durable partne