Executive Director, Governance Risk & Compliance

Information Security; Richardson (TX); On-site; USD 178,000 - 330,000; Full time

Job summary

HCSC seeks an Executive Director to lead enterprise GRC, risk, and compliance across its corporate structure. The role sets strategy, owns GRC outcomes, and ensures regulatory alignment with SOX, HIPAA, and HITRUST.

It oversees policies, risk reporting to the C-suite and Board, and drives cross‑functional risk remediation with Legal, IT, and business stakeholders. The position requires extensive experience in IT security leadership, budget stewardship, and a proven track record in

Qualifications

• Bachelor’s degree required; 15+ years IT/Information Security experience or 19+ years without a degree.
• 7+ years of people leadership experience (multi-team leadership preferred).
• Proven experience leading enterprise GRC programs (risk, compliance, policy, third‑party risk, subsidiary governance).
• Experience briefing executives/Board, owning budgets, and driving cross‑functional outcomes.

Responsibilities

• Set strategy for enterprise security risk and compliance across the company and subsidiaries.
• Own GRC outcomes and ensure regulatory alignment (SOX, HIPAA, HITRUST).
• Govern security policy, exceptions, security awareness, and third‑party risk management.
• Lead threat and vulnerability management and ensure risk policies and standards are followed.
• Oversee enterprise information security risk posture, budget stewardship, and cross‑functional alignment with Legal, Compliance, IT, and business stakeholders.

Skills

GRC leadership

Executive briefing

Budget management

Policy & risk management

Cross-functional collaboration

Regulatory knowledge HIPAA/HITRUST

SOX compliance

NIST CSF/800-53

ISO 27001

Leadership experience

Education

Bachelor’s degree in IT/Information Security

Job description

At HCSC, our employees are the cornerstone of our business and the foundation to our success. We empower employees with curated development plans that foster growth and promote rewarding, fulfilling careers.

Join HCSC and be part of a purpose-driven company that will invest in your professional development.

This position provides enterprise leadership for security risk and compliance by setting strategy, owning GRC outcomes, and ensuring regulatory alignment across the company and its subsidiaries. The Executive Director builds and sustains the enterprise GRC framework and leads all enterprise attestations and certifications, including SOX, HIPAA, and HITRUST, supported by clear C suite and Board reporting. The role governs security policy, exceptions, security awareness initiatives, and third party risk management, while enabling consistent identification, tracking, remediation, and reporting of security risks across the enterprise. Responsibilities also include overseeing processes for threat and vulnerability management, ensuring adherence to established risk policies and standards, and continuously improving security risk management capabilities and controls. The Executive Director owns the enterprise information security risk posture, budget stewardship, and cross functional alignment with Legal, Compliance, IT, and Business stakeholders.

Required Job Qualifications

• Bachelor’s degree and 15 years of experience in IT/Information Security; or 19 years of experience without a degree.
• Minimum 7 years ofpeopleleadership experience (multi‑team leadership preferred).
• Proven experience leading enterprise GRC programs (risk, compliance, policy, third‑party risk, subsidiary governance).
• Demonstrated success briefing executives/Board, owning budgets, and driving cross‑functional outcomes.

Preferred Job Qualifications

Executive experience with regulatory regimes (e.g., HIPAA/HITRUST, SOX) and enterprise control frameworks (NIST CSF/800-53, ISO 27001).

Compensation: $177,500.00 - $329,800.00

Exact compensation may vary based on skills, experience, and location

HCSC Employment Statement

We are an Equal Opportunity Employment employer dedicated to providing a welcoming environment where the unique differences of our employees are respected and valued. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other legally protected characteristics.