Director, GRC & Security Strategy (Remote)

DaParrot Ltd; Northern (KY); Hybrid; USD 212,000 - 230,000; Full time

Benefits offered by this job

ESPP

Remote‑first culture

Cell phone stipend

Office setup reimbursement

Parental leave

Job summary

Clover Health is seeking a Director of Governance, Risk, and Compliance (GRC) to define and execute security governance and risk strategy for a public, technology-enabled healthcare company.

The role leads enterprise-level governance, risk decisions, and compliance readiness, coordinating with Legal, Privacy, Internal Audit, and the Board. A senior leader will manage a vendor for GRC services and ensure audit readiness and resilience across the organization.

Qualifications

• 8+ years of experience in information security, GRC, risk management, or related disciplines.
• Experience leading security governance and compliance programs in regulated environments.
• Strong working knowledge of HIPAA and healthcare security requirements.
• Experience operating in a public company or similarly regulated environment.
• Proven experience managing third-party vendors providing GRC services or staff augmentation.

Responsibilities

• Define and evolve Clover Health's security governance and risk management strategy.
• Lead security-related audits, assessments, and regulatory inquiries with Legal, Compliance, and Internal Audit.
• Own third-party security risk management program end-to-end; oversee vendor due diligence and remediation tracking.
• Coordinate incident response governance, crisis management, DR, and business continuity.
• Influence senior leaders with data and executive presence to advance GRC maturity.

Skills

GRC leadership

Executive communication

Vendor management

Cross-functional influence

Security governance

Job description

Clover Health is seeking a Director of Governance, Risk, and Compliance (GRC) to define and execute security governance and risk strategy for a public, technology-enabled healthcare company.

The role leads enterprise-level governance, risk decisions, and compliance readiness, coordinating with Legal, Privacy, Internal Audit, and the Board. A senior leader will manage a vendor for GRC services and ensure audit readiness and resilience across the organization.