Executive Director, Governance Risk & Compliance

HCSC; Chicago (IL); On-site; USD 178,000 - 330,000; Full time

Job summary

Health Care Service Corporation is seeking an Executive Director to provide enterprise leadership for security risk and compliance, setting strategy and owning GRC outcomes across the company and subsidiaries. You will lead attestations and certifications and report to the C‑Suite and Board on risk posture and governance.

You will oversee policies, risk controls, and cross‑functional collaboration with Legal, Compliance, IT, and business stakeholders to improve threat management and regulatory

Qualifications

• Bachelor’s degree and 15+ years in IT/Information Security, or 19+ years without a degree.
• Minimum 7 years of people leadership experience.
• Proven experience leading enterprise GRC programs (risk, compliance, policy, third‑party risk, subsidiary governance).
• Experience briefing executives/Board, owning budgets, and driving cross‑functional outcomes.

Responsibilities

• Lead enterprise GRC framework and attestations including SOX, HIPAA, and HITRUST.
• Oversee security policy, exceptions, awareness initiatives, and third‑party risk management.
• Ensure consistent identification, remediation, and reporting of security risks across the enterprise.
• Collaborate with Legal, Compliance, IT, and business stakeholders to align risk strategy.

Skills

People leadership

GRC programs

Budget ownership

Executive briefing

Regulatory knowledge

Education

Bachelor’s degree or equivalent experience

Tools

NIST CSF/800-53

ISO 27001

Job description

Flex

TX - Richardson

IL - Chicago

Full time

R0052438

At HCSC, our employees are the cornerstone of our business and the foundation to our success. We empower employees with curated development plans that foster growth and promote rewarding, fulfilling careers.

Join HCSC and be part of a purpose-driven company that will invest in your professional development.

Job Summary

This position provides enterprise leadership for security risk and compliance by setting strategy, owning GRC outcomes, and ensuring regulatory alignment across the company and its subsidiaries. The Executive Director builds and sustains the enterprise GRC framework and leads all enterprise attestations and certifications, including SOX, HIPAA, and HITRUST, supported by clear C suite and Board reporting. The role governs security policy, exceptions, security awareness initiatives, and third party risk management, while enabling consistent identification, tracking, remediation, and reporting of security risks across the enterprise. Responsibilities also include overseeing processes for threat and vulnerability management, ensuring adherence to established risk policies and standards, and continuously improving security risk management capabilities and controls. The Executive Director owns the enterprise information security risk posture, budget stewardship, and cross functional alignment with Legal, Compliance, IT, and Business stakeholders

Required Job Qualifications:

• Bachelor’s degree and 15 years of experience in IT/Information Security; or 19 years of experience without a degree.
• Minimum 7 years of people leadership experience (multi‑team leadership preferred).
• Proven experience leading enterprise GRC programs (risk, compliance, policy, third‑party risk, subsidiary governance).
• Demonstrated success briefing executives/Board, owning budgets, and driving cross‑functional outcomes.

Preferred Job Qualifications:

Executive experience with regulatory regimes (e.g., HIPAA/HITRUST, SOX) and enterprise control frameworks (NIST CSF/800‑53, ISO 27001).

Are you being referred to one of our roles? If so, ask your connection at HCSC about our Employee Referral process!

Pay Transparency Statement:

At Health Care Service Corporation, you will be part of an organization committed to offering meaningful benefits to our employees to support their life outside of work. From health and wellness benefits, 401(k) savings plan, pension plan, paid time off, paid parental leave, disability insurance, supplemental life insurance, employee assistance program, paid holidays, tuition reimbursement, plus other incentives, we offer a robust total rewards package for employees. Learn more about our benefit offerings by visiting https://careers.hcsc.com/totalrewards .

The compensation offered will vary depending on your job-related skills, education, knowledge, and experience. This role aligns with an annual incentive bonus plan subject to the terms and the conditions of the plan.

HCSC Employment Statement:

We are an Equal Opportunity Employment employer dedicated to providing a welcoming environment where the unique differences of our employees are respected and valued. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other legally protected characteristics.

Base Pay Range

$177,500.00 - $329,800.00

Exact compensation may vary based on skills, experience, and location.

For more than 80 years, HCSC has been dedicated to expanding access to high-quality, cost-effective health care and equipping our members with information and tools to make the best health care decisions for themselves and their families. As an industry leader, HCSC also has been helping to make the health care system work better for all Americans. To remain a leader, we offer compelling careers that encourage resourcefulness, strategic thought and empower you to make a difference in the lives of our members and their communities.

Today, with the industry at an important crossroad, HCSC is reimagining health care and looking for original thinkers who aren’t afraid to make innovative contributions. We are an Equal Opportunity Employment employer dedicated to workforce diversity and a drug‑free and smoke‑free workplace. Learn more about HCSC, our commitment to our members and the opportunity you’ll have to improve health care delivery in an open, collaborative environment.

HCSC is committed to diversity in the workplace and to providing equal opportunity to employees and applicants.

If you are an individual with a disability or a disabled veteran and need an accommodation or assistance in either using the Careers website or completing the application process, you can call us at 1-866-977-7378 to request reasonable accommodations.

Blue Cross and Blue Shield of Illinois, Blue Cross and Blue Shield of Montana, Blue Cross and Blue Shield of New Mexico, Blue Cross and Blue Shield of Oklahoma, and Blue Cross and Blue Shield of Texas,

Divisions of Health Care Service Corporation, a Mutual Legal Reserve Company, and Independent Licensee of the Blue Cross and Blue Shield Association

© Copyright 2025 Health Care Service Corporation. All Rights Reserved.