Director, Security - GRC

Concentra, Inc; Addison (TX); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

401(k) match

Medical insurance

Dental & Vision plans

Paid time off

Job summary

Concentra, Inc. in Addison, TX is seeking a Director, Security - GRC to lead governance, risk management, and compliance initiatives.

You will drive policy creation, risk assessments, and third‑party risk management across the organization. You will oversee audits for compliance with PCI, SOX, HIPAA, and other frameworks, build metrics, and partner with stakeholders and auditors to strengthen security across platforms and regions.

Qualifications

• Bachelor's degree in Computer Science or Information Security.
• 8–10 years of risk management experience.
• 3–4 years of project management experience.
• Experience building GRC programs in cloud and SaaS environments.
• Strong collaboration and communication skills.
• Ability to handle HIPAA/PHI privacy requirements and related frameworks.

Responsibilities

• Create and maintain Security Compliance policies.
• Perform security risk assessments and close gaps.
• Lead Third Party Risk Management (TPRM) program.
• Set up internal audit processes for security needs.
• Oversee platform security audits for new regions and regulations.
• Drive complex security projects with multiple stakeholders.
• Develop metrics to report risk and program effectiveness.
• Conduct security awareness trainings for the company.

Skills

Risk management

Project management

GRC programs

Cloud security

Education

Bachelor's degree in Computer Science or Information Security

Job description

• Location: US-TX-Addison
• Job ID: 351157
• Pos. Category: Corporate - Information Systems
• Pos. Type: Full Time
• Recruiter : Full Name: First Last Demetrius Daniels

Overview

Concentra is recognized as the nation's leading occupational health care company.

With more than 40 years of experience, Concentra is dedicated to our mission to improve the health of America's workforce, one patient at a time. With a wide range of services and proactive approaches to care, Concentra colleagues provide exceptional service to employers and exceptional care to their employees.

The Director, Security - GRC (Governance, Risk Management, and Compliance) will lead the efforts in maintaining compliance with various regulatory and security frameworks. This role requires a deep understanding of security, compliance, regulatory frameworks, platform management, vendor security reviews, third party risk management and customer interactions. Requires a strong ability to collaborate across functions and provide valuable insights and leadership in enhancing our security and compliance environment (s).

Responsibilities

• Create and maintain Security Compliance policies
• Perform security risk assessments to identify gaps, develop recommendations and close the gaps to completion and resolution
• Lead and maintain and Third Party Risk Management (TPRM) program
• Setup Internal audit processes for various security needs
• Oversee platform security compliance audits for new regions to comply with legal regulations
• Project management that includes the knowledge to initiate and drive complex security projects requiring various stakeholders
• Develop metrics to track security program effectiveness and to report risk
• Create a governance program for different security areas like Infrastructure, Application, SOC and others
• Identify critical security audit areas, establish the audit process and have completed audit of few areas
• Create and update security risk metrics to measure the risk levels across systems and processes
• Conduct security awareness and educational trainings for the company and specific teams
• Facilitate and participate in internal audits of critical processes and as required for PCI and SOX
• Complete risk assessments of high-risk processes and come up with gaps and recommendations
• Rollout security awareness trainings for the company and GRC team

Qualifications

• Education Level: Bachelor's Degree Major: Computer Science, Information Security
• Minimum of 8-10 years of experience related to risk management
• Three to four years of project management experience
• Experience developing GRC programs in a cloud and SaaS environment.
• Concentra Core Competencies of Service Mentality, Attention to Detail, Sense of Urgency, Initiative and Flexibility
• Ability to make decisions or solve problems by using logic to identify key facts, explore alternatives, and propose quality solutions
• Outstanding customer service skills as well as the ability to deal with people in a manner which shows tact and professionalism
• The ability to properly handle sensitive and confidential information (including HIPAA and PHI) in accordance with federal and state laws and company policies
• Experience with privacy frameworks, such as SOX, SOC2 Type 2, PCI, NIST and HIPAA
• Experience with third party risk management
• Strong collaborator, with experience working on teams composed of both technical and non technical members
• Demonstrated ability to lead large projects, problem-solve, multitask, and have excellent organizational skills
• Excellent written and verbal communication skills, with experience presenting to key stakeholders and partnering with internal collaborators and external auditors
• Thrive in a data-driven, fast-paced and innovative environment
• Strong prioritization skills and the ability to handle multiple job duties in a fast-paced environment
• Exceptional communication skills and the ability to communicate appropriately at all levels of the organization, written and verbal

Additional Data

Employee Benefits

• 401(k) Retirement Plan with Employer Match
• Medical, Vision, Prescription, Telehealth, & Dental Plans
• Life & Disability Insurance
• Paid Time Off

  We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation, if required.

  *This job requires access to confidential and sensitive information, requiring ongoing discretion and secure information management*

  Concentra is an equal opportunity employer that prohibits discrimination, and will make decisions regarding employment opportunities, including hiring, promotion and advancement, without regard to the following characteristics: race, color, national origin, religious beliefs, sex (including pregnancy), age, disability, sexual orientation, gender identity, citizenship status, military status, marital status, genetic information, or any other basis protected by federal, state or local fair employment practice laws.