GRC & Cybersecurity Program Lead

Ann & Robert H. Lurie Children's Hospital of Chicago; Chicago (IL); On-site; USD 119,600 - 197,350; Full time

Benefits offered by this job

Medical, dental, vision insurance

Employer paid life & disability

Health Savings Account

Flexible Spending Accounts

PTO, Holidays, Parental Leave

403(b) with 5% match

Job summary

Ann & Robert H. Lurie Children’s Hospital of Chicago is seeking a seasoned GRC leader to strengthen security posture, reduce risk, and ensure regulatory compliance across NIST CSF, PCI DSS, HIPAA, and HITECH.

You will oversee staff, policy creation, and audit programs while guiding cross-departmental collaboration. You will manage risk assessments, third-party reviews, and data protection initiatives, driving continuous security improvements and executive reporting.

Qualifications

• 5-7 years of cybersecurity GRC experience, including at least 2 years in management.
• Bachelor’s degree required; Master’s preferred in Information Security, Computer Science, or related field.
• Expert knowledge of NIST CSF, PCI DSS, HIPAA/HITECH.
• Proven leadership and project management skills.
• Proficiency in compliance, audit, and monitoring tools.
• Certifications such as CISM, CISSP, or CISA are required.

Responsibilities

• Lead and manage the GRC staff, including hiring, training, performance evaluation, and career development.
• Oversee policy and standards creation aligned with regulatory requirements and best practices.
• Lead risk assessments and track remediation progress.
• Manage compliance audits and produce technical and executive reports.
• Oversee third-party risk assessments and vendor compliance.
• Direct enterprise security awareness programs and continuous improvement efforts.
• Manage data protection programs and ensure security of sensitive information.
• Lead vulnerability management programs and timely remediation.
• Oversee email security programs and related controls.
• Coordinate with leadership on GRC strategies, metrics, and priorities.

Skills

GRC management

Cybersecurity

Compliance tools

NIST CSF

PCI DSS

HIPAA/HITECH

Leadership

Auditing

Monitoring tools

CISM

CISSP

CISA

Education

Bachelor’s degree

Master’s degree preferred

Tools

Audit tools

Monitoring tools

Job description

Ann & Robert H. Lurie Children’s Hospital of Chicago is seeking a seasoned GRC leader to strengthen security posture, reduce risk, and ensure regulatory compliance across NIST CSF, PCI DSS, HIPAA, and HITECH.

You will oversee staff, policy creation, and audit programs while guiding cross-departmental collaboration. You will manage risk assessments, third-party reviews, and data protection initiatives, driving continuous security improvements and executive reporting.