Executive Director, Information Risk & Governance (Remote)

Modernhealth; United States; On-site; USD 231,000 - 272,000; Full time

Benefits offered by this job

Medical/Dental/Vision Insurance

Generous Time Off

401k with match

Professional Development Stipend

Job summary

Modern Health, a remote-first mental health benefits platform, seeks a Senior Director, Information Risk & Governance to own enterprise risk governance, AI risk, and third-party assurance. You will partner with Security, Legal, Compliance, and Product to implement robust risk management, incident response, and policy programs for global clients.

You will lead executive reporting, set risk-based priorities, and drive governance across data handling, vendor risk, and certification efforts,

Qualifications

• Ten+ years in information-security risk management, governance, or security programs.
• Experience with HIPAA, NIST CSF 2.0, SOC 2, HITRUST, ISO 27001 readiness or equivalent.
• Strong ability to translate risk into business terms for executives and clients.
• Experience leading second-line risk, governance, or assurance functions.

Responsibilities

• Own information-security risk register and risk appetite models.
• Lead cross-functional governance programs for enterprise risk and AI risk.
• Run the AI governance program including policy, intake, and vendor eligibility.
• Manage incident and data governance programs across security and privacy teams.
• Provide governance, escalation, and client-facing assurance to executives and customers.
• Develop policy, awareness, and oversight for information risk.

Skills

Information security governance

Risk management

Regulatory compliance

Executive reporting

Vendor risk management

Cross-functional collaboration

Audit evidence

Job description

Modern Health, a remote-first mental health benefits platform, seeks a Senior Director, Information Risk & Governance to own enterprise risk governance, AI risk, and third-party assurance. You will partner with Security, Legal, Compliance, and Product to implement robust risk management, incident response, and policy programs for global clients.

You will lead executive reporting, set risk-based priorities, and drive governance across data handling, vendor risk, and certification efforts,