Director GRC

Health Care Service Corporation; Richardson (TX); On-site; USD 133,000 - 248,000; Full time

Job summary

Health Care Service Corporation (HCSC) is seeking an experienced Information Security leader to drive governance, risk, and compliance programs across the enterprise from Richardson, TX.

You will develop and maintain the compliance framework, oversee policy management, third‑party and subsidiary risk, and lead cross‑functional teams to align security with business priorities.

This role requires extensive leadership, strong communication skills, and deep knowledge of regulatory standards.

Qualifications

• Requires a Bachelor's degree and extensive leadership experience in IT/security risk or compliance.
• Strong knowledge of governance, risk, and compliance frameworks and control mappings.
• Proven ability to influence stakeholders in complex organizations.

Responsibilities

• Lead the execution of governance, risk, and compliance programs.
• Develop and maintain the compliance framework and policy management.
• Oversee subsidiary and third‑party risk management and remediation.

Skills

Leadership

Information security risk management

Regulatory compliance

Communication skills

Stakeholder management

Project management

Adaptability / change management

Education

Bachelor's Degree in Computer Science, MIS, or related field

10+ years IT/InfoSec or 14+ years IT/Risk/Compliance experience

Tools

Regulatory compliance tools

Security policy management systems

Risk management tools

Job description

At HCSC, our employees are the cornerstone of our business and the foundation to our success. We empower employees with curated development plans that foster growth and promote rewarding, fulfilling careers.

Join HCSC and be part of a purpose-driven company that will invest in your professional development.

This position is responsible for leading the execution of Information Security governance, risk, and compliance programs; developing and maintaining the compliance framework; supporting compliance and attestation activities; oversight of security policy management, exceptions, subsidiary risk, and third-party risk management; facilitating the identification, reporting, management, and remediation of security risks; maintaining effective risk tracking and reporting processes; and identifying and recommending improvements to the organization’s security risk management controls.

Required Job Qualifications

• Bachelors Degree and 10 years in Information Technology / Information Security or 14 years of experience Information Technology, Information Security, Risk, or Compliance disciplines.
• 4-5 years in Management or Leadership experience.
• Knowledge of project management
• Information Technology and security risk management
• Knowledge of regulatory and compliance standards and practices
• Understanding of information security principles and control frameworks
• Understanding of business priorities and technology capabilities
• Strong oral and written communication skills
• Strong analytical and problem-solving skills
• Experience with security standards, regulatory compliance tools, and platforms
• Knowledge of emerging technologies and associated risk implications
• System and technology integration concepts
• IT standards, procedures, and policies
• Applied governance and risk program execution
• Ability to influence stakeholders and execute within complex organizations
• Leadership - effectively leads teams and collaborates across functions
• Adaptability and ability to manage change
• Relationship management and conflict resolution skills
• Support budget planning and resource allocation for GRC initiatives
• Contribute to business cases supporting GRC investments
• Provide input to investment and prioritization decisions

Preferred Job Qualifications

• Bachelor’s Degree in Computer Science, MIS, or related field
• Experience supporting subsidiary governance and/or third-party risk programs preferred

Compensation: $133,400.00 - $247,700.00

Exact compensation may vary based on skills, experience, and location

HCSC Employment Statement

We are an Equal Opportunity Employment employer dedicated to providing a welcoming environment where the unique differences of our employees are respected and valued. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other legally protected characteristics.

To learn more about available benefits, please click https://careers.hcsc.com/totalrewards