Cybersecurity GRC Manager

Ann & Robert H. Lurie Children's Hospital of Chicago; Chicago (IL); On-site; USD 119,600 - 197,350; Full time

Benefits offered by this job

Medical, dental, vision insurance

Employer paid life & disability

Health Savings Account

Flexible Spending Accounts

PTO, Holidays, Parental Leave

403(b) with 5% match

Job summary

Ann & Robert H. Lurie Children’s Hospital of Chicago is seeking a seasoned GRC leader to strengthen security posture, reduce risk, and ensure regulatory compliance across NIST CSF, PCI DSS, HIPAA, and HITECH.

You will oversee staff, policy creation, and audit programs while guiding cross-departmental collaboration. You will manage risk assessments, third-party reviews, and data protection initiatives, driving continuous security improvements and executive reporting.

Qualifications

• 5-7 years of cybersecurity GRC experience, including at least 2 years in management.
• Bachelor’s degree required; Master’s preferred in Information Security, Computer Science, or related field.
• Expert knowledge of NIST CSF, PCI DSS, HIPAA/HITECH.
• Proven leadership and project management skills.
• Proficiency in compliance, audit, and monitoring tools.
• Certifications such as CISM, CISSP, or CISA are required.

Responsibilities

• Lead and manage the GRC staff, including hiring, training, performance evaluation, and career development.
• Oversee policy and standards creation aligned with regulatory requirements and best practices.
• Lead risk assessments and track remediation progress.
• Manage compliance audits and produce technical and executive reports.
• Oversee third-party risk assessments and vendor compliance.
• Direct enterprise security awareness programs and continuous improvement efforts.
• Manage data protection programs and ensure security of sensitive information.
• Lead vulnerability management programs and timely remediation.
• Oversee email security programs and related controls.
• Coordinate with leadership on GRC strategies, metrics, and priorities.

Skills

GRC management

Cybersecurity

Compliance tools

NIST CSF

PCI DSS

HIPAA/HITECH

Leadership

Auditing

Monitoring tools

CISM

CISSP

CISA

Education

Bachelor’s degree

Master’s degree preferred

Tools

Audit tools

Monitoring tools

Job description

Ann & Robert H. Lurie Children's Hospital of Chicago provides superior pediatric care in a setting that offers the latest benefits and innovations in medical technology, research and family-friendly design. As the largest pediatric provider in the region with a 140-year legacy of excellence, kids and their families are at the center of all we do. Ann & Robert H. Lurie Children's Hospital of Chicago is ranked in all 10 specialties by the U.S. News & World Report.

Day (United States of America)

Location

680 Lake Shore Drive

Job Description

• Leads the organization’s GRC program to strengthen the security posture, reduce risk, and ensure compliance with NIST CSF, PCI DSS, HIPAA, and HITECH.


• Oversee team operations, strategy execution, and cross-departmental collaboration.

Essential Job Functions

• Manage GRC staff, including hiring, training, performance evaluation, and career development.


• Oversee policy and standards creation, ensuring alignment with regulatory requirements and best practices.


• Lead risk assessment activities and track remediation progress.


• Manage compliance audits, producing technical and executive reports.


• Oversee third-party risk assessments and ensure vendor compliance.


• Direct enterprise security awareness initiatives and continuous improvement efforts.


• Manage data protection programs to ensure security of sensitive information.


• Lead vulnerability management programs, ensuring timely remediation.


• Oversee email security programs and enforce related controls.


• Coordinate with leadership on GRC strategies, metrics, and priorities.


• Perform other related duties as assigned.

Knowledge, Skills And Abilities

• 5-7 years’ experience in cybersecurity GRC, including at least 2 years in management.


• Bachelor’s degree required; Master’s preferred in Information Security, Computer Science, or related field.


• Expert knowledge of NIST CSF, PCI DSS, HIPAA/HITECH.


• Proven leadership and project management skills.


• Proficiency in compliance, audit, and monitoring tools.


• Relevant certifications (e.g., CISM, CISSP, CISA) required.

Education

Bachelor's Degree (Required)

Pay Range

$119,600.00-$197,350.40 Salary

In addition to base salary, Lurie Children's offer a comprehensive rewards package that may include differentials for some hourly employees, leadership incentives for select roles, health and retirement benefits, and wellbeing programs.

Benefit Statement

Benefits

For full time and part time employees who work 20 or more hours per week we offer a generous benefits package that includes:

• Medical, dental and vision insurance


• Employer paid group term life and disability


• Employer contribution toward Health Savings Account


• Flexible Spending Accounts


• Paid Time Off (PTO), Paid Holidays and Paid Parental Leave


• 403(b) with a 5% employer match

Various Voluntary Benefits

• Supplemental Life, AD&D and Disability


• Critical Illness, Accident and Hospital Indemnity coverage


• Tuition assistance


• Student loan servicing and support


• Adoption benefits


• Backup Childcare and Eldercare


• Employee Assistance Program, and other specialized behavioral health services and resources for employees and family members


• Discount on services at Lurie Children's facilities


• Discount purchasing program

There’s a Place for You with Us

At Ann & Robert H. Lurie Children's Hospital of Chicago and its affiliates (collectively “Lurie Children’s”), we embrace and celebrate diversity and equity in a serious way. We are committed to building a team with a variety of backgrounds, skills, and viewpoints — recognizing that diverse identities strengthen our workplace and the care we can provide to the Chicago community and beyond. We treat everyone fairly, appreciate differences, and make meaningful connections that foster belonging and allyship. This is a place where you can be your best, so we can give our best to the patients and families who trust us with their care.

Lurie Children's and its affiliates are equal employment opportunity employers. We value diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity or expression, religion, national origin, ancestry, age, disability, marital status, pregnancy, protected veteran status, order of protection status, protected genetic information, or any other characteristic protected by law.

For questions about how to request an accommodation please contact: [e-mail]

AI Notice

Lurie Children's utilizes certain AI-enabled features within our recruiting platform to support candidate engagement and assist recruiters in identifying and prioritizing applicants whose experience aligns with job requirements. All employment decisions are made by individuals.

It is a civil rights violation with respect to recruitment, hiring, promotion, or employment for an employer to use artificial intelligence that has the effect of subjecting employees to discrimination on the basis of protected classes under the Illinois Human Rights Act or to use zip codes as a proxy for protected classes.

For questions about the use of artificial intelligence in this process or any additional support, please contact: [e-mail]