Cybersecurity GRC Leader — Risk, Compliance & Audit

Lurie Children's; Chicago (IL); On-site; USD 119,600 - 197,350; Full time

Job summary

Ann & Robert H. Lurie Children’s Hospital of Chicago is seeking a Cybersecurity GRC Manager to lead the organization’s governance, risk, and compliance program on a full-time basis.

You will oversee policy development, risk assessments, third-party vendor risk, and security awareness initiatives, while collaborating with stakeholders across departments to strengthen the security posture and ensure regulatory alignment with NIST CSF, PCI DSS, HIPAA/HITECH.

Qualifications

• 5–7 years’ experience in cybersecurity GRC, including at least 2 years in management.
• Bachelor’s degree required; Master’s preferred in Information Security, Computer Science, or related field.
• Expert knowledge of NIST CSF, PCI DSS, HIPAA/HITECH.
• Proven leadership and project management skills.
• Proficiency in compliance, audit, and monitoring tools.
• Relevant certifications (e.g., CISM, CISSP, CISA) required.

Responsibilities

• Lead the organization’s GRC program to strengthen security posture and compliance.
• Oversee policy and standards creation, aligning with regulatory requirements.
• Lead risk assessment activities and track remediation progress.
• Manage compliance audits, producing technical and executive reports.
• Oversee third-party risk assessments and vendor compliance.
• Direct enterprise security awareness initiatives and data protection programs.
• Lead vulnerability management and email security programs; coordinate with leadership on GRC strategies.

Skills

GRC leadership

Risk assessment

Policy development

Compliance monitoring

Vendor risk

Security awareness

Vulnerability management

Email security

Cross-functional collaboration

Project management

Education

Bachelor's degree

Master's degree (preferred)

Tools

Compliance tools

Audit tools

Monitoring tools

Job description

Ann & Robert H. Lurie Children’s Hospital of Chicago is seeking a Cybersecurity GRC Manager to lead the organization’s governance, risk, and compliance program on a full-time basis.

You will oversee policy development, risk assessments, third-party vendor risk, and security awareness initiatives, while collaborating with stakeholders across departments to strengthen the security posture and ensure regulatory alignment with NIST CSF, PCI DSS, HIPAA/HITECH.