Director GRC

hcsc; Richardson (TX); On-site; USD 133,000 - 248,000; Full time

Job summary

Health Care Service Corporation (HCSC) is seeking a senior information security leader to drive governance, risk, and compliance initiatives across the enterprise. This role will own the compliance program, policies, and risk management, coordinating with subsidiaries and third-party partners while aligning with business priorities and regulatory requirements.

The ideal candidate will have extensive IT/InfoSec experience, strong leadership, and the ability to influence diverse stakeholders in a

Qualifications

• Bachelor's degree and 10+ years in IT/InfoSec or 14+ years in IT/InfoSec disciplines.
• 4–5 years in management or leadership roles.
• Knowledge of regulatory and compliance standards and practices.
• Understanding of information security principles and control frameworks.
• Strong written and oral communication skills.
• Experience with security standards, regulatory compliance tools, and platforms.
• Ability to influence stakeholders in complex organizations.

Responsibilities

• Lead the execution of information security governance, risk, and compliance programs.
• Develop and maintain the compliance framework.
• Oversee security policy management, exceptions, subsidiary risk, and third‑party risk management.
• Identify, report, and remediate security risks; maintain risk tracking.
• Provide input to investment and prioritization decisions for GRC initiatives.

Skills

GRC Leadership

Information Security

Regulatory Compliance

Risk Management

Project Management

Communication Skills

Stakeholder Influence

Security Standards & Frameworks

Education

Bachelor's Degree in Computer Science, MIS, or related field

Experience: 10+ years IT/InfoSec (or 14+ years in related roles)

Job description

At HCSC, our employees are the cornerstone of our business and the foundation to our success. We empower employees with curated development plans that foster growth and promote rewarding, fulfilling careers. Join HCSC and be part of a purpose-driven company that will invest in your professional development.

Job Summary

This position is responsible for leading the execution of Information Security governance, risk, and compliance programs; developing and maintaining the compliance framework; supporting compliance and attestation activities; oversight of security policy management, exceptions, subsidiary risk, and third‑party risk management; facilitating the identification, reporting, management, and remediation of security risks; maintaining effective risk tracking and reporting processes; and identifying and recommending improvements to the organization's security risk management controls.

Required Job Qualifications:

• Bachelors Degree and 10 years in Information Technology / Information Security or 14 years of experience Information Technology, Information Security, Risk, or Compliance disciplines.
• 4-5 years in Management or Leadership experience.
• Knowledge of project management
• Information Technology and security risk management
• Knowledge of regulatory and compliance standards and practices
• Understanding of information security principles and control frameworks
• Understanding of business priorities and technology capabilities
• Strong oral and written communication skills
• Strong analytical and problem‑solving skills
• Experience with security standards, regulatory compliance tools, and platforms
• Knowledge of emerging technologies and associated risk implications
• System and technology integration concepts
• IT standards, procedures, and policies
• Applied governance and risk program execution
• Ability to influence stakeholders and execute within complex organizations
• Leadership-effectively leads teams and collaborates across functions
• Adaptability and ability to manage change
• Relationship management and conflict resolution skills
• Support budget planning and resource allocation for GRC initiatives
• Contribute to business cases supporting GRC investments
• Provide input to investment and prioritization decisions

Preferred Job Qualifications:

• Bachelor's Degree in Computer Science, MIS, or related field
• Experience supporting subsidiary governance and/or third‑party risk programs preferred

Pay Transparency Statement:

At Health Care Service Corporation, you will be part of an organization committed to offering meaningful benefits to our employees to support their life outside of work. From health and wellness benefits, 401(k) savings plan, pension plan, paid time off, paid parental leave, disability insurance, supplemental life insurance, employee assistance program, paid holidays, tuition reimbursement, plus other incentives, we offer a robust total rewards package for employees.

The compensation offered will vary depending on your job-related skills, education, knowledge, and experience. This role aligns with an annual incentive bonus plan subject to the terms and the conditions of the plan.

HCSC Employment Statement:

We are an Equal Opportunity Employment employer dedicated to providing a welcoming environment where the unique differences of our employees are respected and valued. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other legally protected characteristics.

Base Pay Range

$133,400.00 - $247,700.00

Exact compensation may vary based on skills, experience, and location.