Executive Director, Governance Risk & Compliance

hcsc; Richardson (TX); On-site; USD 178,000 - 330,000; Full time

Job summary

Health Care Service Corporation (HCSC) seeks an Executive Director to lead enterprise security risk and compliance, setting strategy, owning GRC outcomes, and aligning with regulatory requirements across the company and its subsidiaries. You will govern security policy, drive third-party risk management, and oversee threat and vulnerability processes, ensuring clear reporting to the C-suite and Board.

The role includes budget stewardship and cross-functional collaboration with Legal, Compliance,

Qualifications

• Bachelor's degree or 19 years of in IT/Info Security without degree.
• 7+ years of people leadership experience (multi-team leadership preferred).
• Proven experience leading enterprise GRC programs (risk, compliance, policy, third-party risk, subsidiary governance).

Responsibilities

• Lead enterprise GRC program across risk, compliance, policy, third-party risk, and subsidiary governance.
• Oversee SOX, HIPAA, HITRUST attestations and certifications with executive/Board reporting.
• Drive threat and vulnerability management, policy adherence, and cross-functional risk remediation.

Skills

Leadership

GRC programs

Executive briefing

Budget management

Cross-functional collaboration

Information security

Regulatory frameworks

HIPAA/HITRUST/SOX

Education

Bachelor's degree in IT/Information Security

Job description

At HCSC, our employees are the cornerstone of our business and the foundation to our success. We empower employees with curated development plans that foster growth and promote rewarding, fulfilling careers.

Join HCSC and be part of a purpose-driven company that will invest in your professional development.

Job Summary

This position provides enterprise leadership for security risk and compliance by setting strategy, owning GRC outcomes, and ensuring regulatory alignment across the company and its subsidiaries. The Executive Director builds and sustains the enterprise GRC framework and leads all enterprise attestations and certifications, including SOX, HIPAA, and HITRUST, supported by clear C suite and Board reporting. The role governs security policy, exceptions, security awareness initiatives, and third party risk management, while enabling consistent identification, tracking, remediation, and reporting of security risks across the enterprise. Responsibilities also include overseeing processes for threat and vulnerability management, ensuring adherence to established risk policies and standards, and continuously improving security risk management capabilities and controls. The Executive Director owns the enterprise information security risk posture, budget stewardship, and cross functional alignment with Legal, Compliance, IT, and Business stakeholders

Required Job Qualifications

• Bachelor's degree and 15 years of experience in IT/Information Security; or 19 years of experience without a degree.
• Minimum 7 years of people leadership experience (multi-team leadership preferred).
• Proven experience leading enterprise GRC programs (risk, compliance, policy, third-party risk, subsidiary governance).
• Demonstrated success briefing executives/Board, owning budgets, and driving cross-functional outcomes.

Preferred Job Qualifications

• Executive experience with regulatory regimes (e.g., HIPAA/HITRUST, SOX) and enterprise control frameworks (NIST CSF/800-53, ISO 27001).

Pay Transparency Statement

At Health Care Service Corporation, you will be part of an organization committed to offering meaningful benefits to our employees to support their life outside of work.

• health and wellness benefits
• 401(k) savings plan
• pension plan
• paid time off
• paid parental leave
• disability insurance
• supplemental life insurance
• employee assistance program
• paid holidays
• tuition reimbursement
• plus other incentives

we offer a robust total rewards package for employees.

The compensation offered will vary depending on your job-related skills, education, knowledge, and experience. This role aligns with an annual incentive bonus plan subject to the terms and the conditions of the plan.

HCSC Employment Statement

We are an Equal Opportunity Employment employer dedicated to providing a welcoming environment where the unique differences of our employees are respected and valued. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other legally protected characteristics.

Base Pay Range

$177,500.00 - $329,800.00

Exact compensation may vary based on skills, experience, and location.