Enterprise GRC & Security Strategy Executive Director

Information Security

Richardson (TX)

On-site

USD 178,000 - 330,000

Full time

3 days ago

Be an early applicant

Application generator

Stand out for this role — generate a tailored resume and cover letter in about a minute.

Get past ATS filters

Job summary

HCSC seeks an Executive Director to lead enterprise GRC, risk, and compliance across its corporate structure. The role sets strategy, owns GRC outcomes, and ensures regulatory alignment with SOX, HIPAA, and HITRUST.

It oversees policies, risk reporting to the C-suite and Board, and drives cross‑functional risk remediation with Legal, IT, and business stakeholders. The position requires extensive experience in IT security leadership, budget stewardship, and a proven track record in

Qualifications

Bachelor’s degree required; 15+ years IT/Information Security experience or 19+ years without a degree.
7+ years of people leadership experience (multi-team leadership preferred).
Proven experience leading enterprise GRC programs (risk, compliance, policy, third‑party risk, subsidiary governance).
Experience briefing executives/Board, owning budgets, and driving cross‑functional outcomes.

Responsibilities

Set strategy for enterprise security risk and compliance across the company and subsidiaries.
Own GRC outcomes and ensure regulatory alignment (SOX, HIPAA, HITRUST).
Govern security policy, exceptions, security awareness, and third‑party risk management.
Lead threat and vulnerability management and ensure risk policies and standards are followed.
Oversee enterprise information security risk posture, budget stewardship, and cross‑functional alignment with Legal, Compliance, IT, and business stakeholders.