Chief Enterprise GRC & Security Risk Leader

Jobtailor; Illinois; On-site; USD 180,000 - 240,000; Full time

Job summary

Jobtailor is seeking an senior security and GRC leader to own enterprise risk, governance, and regulatory alignment across the organization and its subsidiaries. You will executive-levelly report on risk posture, drive attestations, and govern policy, budget, and awareness initiatives.

The role requires deep experience in SOX, HIPAA, HITRUST, NIST CSF/ISO 27001, and a proven track record of cross-functional leadership with Legal, Compliance, IT, and business stakeholders.

Qualifications

• Bachelor’s degree and 15 years of IT/Information Security experience; or 19 years of experience without a degree.
• Minimum 7 years of people leadership experience (multi-team leadership preferred).
• Proven experience leading enterprise GRC programs, including risk, compliance, policy, third-party risk, and subsidiary governance.
• Preferred: HIPAA/HITRUST and SOX regulatory regimes; experience with NIST CSF/800-53 and ISO 27001 enterprise control frameworks.

Responsibilities

• Provide enterprise leadership for security risk and compliance.
• Set strategy, own GRC outcomes, and ensure regulatory alignment across the company and its subsidiaries.
• Build and sustain the enterprise GRC framework.
• Lead enterprise attestations and certifications, including SOX, HIPAA, and HITRUST.
• Provide C-suite and Board reporting.
• Govern security policy, exceptions, and security awareness initiatives.
• Oversee third-party risk management.
• Enable consistent identification, tracking, remediation, and reporting of enterprise security risks.
• Oversee threat and vulnerability management processes.
• Ensure adherence to established risk policies and standards.
• Continuously improve security risk management capabilities and controls.
• Own the enterprise information security risk posture and budget stewardship.
• Drive cross-functional alignment with Legal, Compliance, IT, and Business stakeholders.

Skills

Enterprise GRC Leadership

Risk Management

Regulatory Compliance

People Leadership

Cross-Functional Collaboration

Education

Bachelor’s degree

Job description

Jobtailor is seeking an senior security and GRC leader to own enterprise risk, governance, and regulatory alignment across the organization and its subsidiaries. You will executive-levelly report on risk posture, drive attestations, and govern policy, budget, and awareness initiatives.

The role requires deep experience in SOX, HIPAA, HITRUST, NIST CSF/ISO 27001, and a proven track record of cross-functional leadership with Legal, Compliance, IT, and business stakeholders.