Executive Director, Enterprise GRC & Security

hcsc; Richardson (TX); On-site; USD 178,000 - 330,000; Full time

Job summary

Health Care Service Corporation (HCSC) seeks an Executive Director to lead enterprise security risk and compliance, setting strategy, owning GRC outcomes, and aligning with regulatory requirements across the company and its subsidiaries. You will govern security policy, drive third-party risk management, and oversee threat and vulnerability processes, ensuring clear reporting to the C-suite and Board.

The role includes budget stewardship and cross-functional collaboration with Legal, Compliance,

Qualifications

• Bachelor's degree or 19 years of in IT/Info Security without degree.
• 7+ years of people leadership experience (multi-team leadership preferred).
• Proven experience leading enterprise GRC programs (risk, compliance, policy, third-party risk, subsidiary governance).

Responsibilities

• Lead enterprise GRC program across risk, compliance, policy, third-party risk, and subsidiary governance.
• Oversee SOX, HIPAA, HITRUST attestations and certifications with executive/Board reporting.
• Drive threat and vulnerability management, policy adherence, and cross-functional risk remediation.

Skills

Leadership

GRC programs

Executive briefing

Budget management

Cross-functional collaboration

Information security

Regulatory frameworks

HIPAA/HITRUST/SOX

Education

Bachelor's degree in IT/Information Security

Job description

Health Care Service Corporation (HCSC) seeks an Executive Director to lead enterprise security risk and compliance, setting strategy, owning GRC outcomes, and aligning with regulatory requirements across the company and its subsidiaries. You will govern security policy, drive third-party risk management, and oversee threat and vulnerability processes, ensuring clear reporting to the C-suite and Board.

The role includes budget stewardship and cross-functional collaboration with Legal, Compliance,