Enterprise IT GRC Advisor (Healthcare)

Community Care of North Carolina Inc; Garner (NC); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Competitive Benefits Package

Growth opportunities

Job summary

Community Care of North Carolina Inc. is seeking a Senior IT GRC Advisor in Garner, NC to lead enterprise IT governance, risk, and compliance.

You will work with IT security, privacy, and legal teams to align controls, conduct risk assessments, and prepare for audits across cloud, on-prem, and vendor environments. The role requires strong analytical skills, strategic thinking, and experience maturing GRC programs with measurable metrics.

Qualifications

• Bachelor's degree in IT, cybersecurity, information systems, accounting, audit, risk management, or related field.
• Minimum of 7 years of IT audit, IT risk management, cybersecurity compliance, or GRC leadership experience.
• Experience planning and leading complex IT audits and risk assessments.
• Experience reviewing third-party risk and assurance artifacts (SOC, HITRUST, certifications).

Responsibilities

• Lead and mature enterprise IT GRC program with governance, risk, policy oversight, and reporting.
• Assess control design and operating effectiveness; provide risk-based recommendations to leadership.
• Plan and execute IT risk assessments, audits, and advisory engagements across tech domains.
• Maintain IT risk register, issue management, remediation tracking, and reporting to leadership.
• Develop dashboards, KPIs, and metrics for audit readiness and risk trends.

Skills

IT GRC

Risk assessment

Audits

Policy development

Stakeholder communication

Education

Bachelor's degree in Information Technology or related field

CISA/CISSP/CISM certification

Job description

Community Care of North Carolina Inc. is seeking a Senior IT GRC Advisor in Garner, NC to lead enterprise IT governance, risk, and compliance.

You will work with IT security, privacy, and legal teams to align controls, conduct risk assessments, and prepare for audits across cloud, on-prem, and vendor environments. The role requires strong analytical skills, strategic thinking, and experience maturing GRC programs with measurable metrics.