GRC Executive Director: Enterprise Risk & Compliance

HCSC Group; Town of Texas (WI); Hybrid; USD 178,000 - 330,000; Full time

Job summary

Health Care Service Corporation seeks an Executive Director to lead Governance, Risk & Compliance, establishing enterprise GRC strategy and ensuring regulatory alignment across the company and subsidiaries. You will own attestations including SOX, HIPAA, and HITRUST, with clear executive reporting to the Board.

The role involves governing security policy, third‑party risk, and risk reporting while driving cross‑functional collaboration with Legal, IT, and Business teams to continuously improve

Qualifications

• Bachelor's degree in IT/Information Security or related field.
• 15+ years of IT/Information Security experience; 19 years of experience without a degree.
• 7+ years of people leadership experience, multi-team leadership preferred.
• Proven experience leading enterprise GRC programs (risk, compliance, policy, third-party risk).
• Demonstrated success briefing executives/Board, owning budgets, and driving cross-functional outcomes.

Responsibilities

• Set strategy and own enterprise GRC outcomes.
• Lead SOX, HIPAA, HITRUST attestations and certifications.
• Oversee security policy, exceptions, third-party risk management, and awareness initiatives.
• Collaborate with Legal, IT, and Business stakeholders to align risk posture.

Skills

GRC leadership

Executive briefing

Budget management

Cross-functional collaboration

Information security

Regulatory compliance

Education

Bachelor's degree in IT/InfoSec

Job description

Health Care Service Corporation seeks an Executive Director to lead Governance, Risk & Compliance, establishing enterprise GRC strategy and ensuring regulatory alignment across the company and subsidiaries. You will own attestations including SOX, HIPAA, and HITRUST, with clear executive reporting to the Board.

The role involves governing security policy, third‑party risk, and risk reporting while driving cross‑functional collaboration with Legal, IT, and Business teams to continuously improve