GRC Executive Director: Risk, Compliance & Policy

HCSC Group; Chicago (IL); On-site; USD 178,000 - 330,000; Full time

Job summary

Health Care Service Corporation is seeking an Executive Director to lead security risk and compliance across the enterprise, setting strategy, owning GRC outcomes, and ensuring regulatory alignment with SOX, HIPAA, and HITRUST. The role oversees policy, awareness, third-party risk, and risk reporting to the C-suite and Board, while coordinating with Legal, Compliance, IT, and business stakeholders.

Strong leadership and deep experience in enterprise GRC programs are required; the position offers

Qualifications

• Bachelor’s degree and 15 years of IT/Information Security experience, or 19 years without a degree.
• Minimum 7 years of people leadership experience across multiple teams.
• Proven experience leading enterprise GRC programs (risk, compliance, policy, third-party risk).
• Experience briefing executives/Board, owning budgets, and driving cross-functional outcomes.

Responsibilities

• Set strategy for security risk and compliance across the enterprise and subsidiaries.
• Oversee enterprise attestations and certifications (SOX, HIPAA, HITRUST).
• Lead threat and vulnerability management processes and risk reporting to C-suite/Board.
• Coordinate with Legal, Compliance, IT, and business stakeholders to align controls.

Skills

People leadership

GRC programs

Executive briefings

Budget management

Education

Bachelor’s degree

Job description

Health Care Service Corporation is seeking an Executive Director to lead security risk and compliance across the enterprise, setting strategy, owning GRC outcomes, and ensuring regulatory alignment with SOX, HIPAA, and HITRUST. The role oversees policy, awareness, third-party risk, and risk reporting to the C-suite and Board, while coordinating with Legal, Compliance, IT, and business stakeholders.

Strong leadership and deep experience in enterprise GRC programs are required; the position offers