GRC Manager: Security & Compliance Leader (SaaS)

Fullscript; United States; Remote; USD 98,000 - 116,000; Full time

Benefits offered by this job

Generous PTO

RRSP match

Flexible benefits

Training budget

Product discount

Work Anywhere

Job summary

Fullscript is seeking an experienced Governance, Risk & Compliance (GRC) Manager to lead and mature its security compliance program. You will manage a small team, drive SOC 2 Type II, PCI DSS, and HITRUST initiatives, and partner across Security, Engineering, Privacy, Legal, Product, IT, and Finance to align controls with business needs.

This hands-on leadership role suits someone who thrives in a fast-growing SaaS environment and enjoys turning regulatory requirements into scalable practices.

Qualifications

• 7+ years of experience in Governance, Risk & Compliance, Information Security, IT Audit, or Security Compliance.

Responsibilities

• Lead and mature Fullscript’s security compliance program across SOC 2 Type II, PCI DSS, and HITRUST.
• Own governance, risk, and compliance strategy and drive cross-functional execution.
• Lead external audits and partner with Security, Engineering, Privacy, Legal, Product, and IT to remediate findings.
• Develop and maintain policies, standards, procedures, and control documentation.
• Provide practical guidance enabling business growth while maintaining risk posture.

Skills

Governance

Risk management

Compliance

Audits

Security frameworks

HIPAA awareness

Vendor risk

Tools

Vanta

Drata

OneTrust

Job description

Fullscript is seeking an experienced Governance, Risk & Compliance (GRC) Manager to lead and mature its security compliance program. You will manage a small team, drive SOC 2 Type II, PCI DSS, and HITRUST initiatives, and partner across Security, Engineering, Privacy, Legal, Product, IT, and Finance to align controls with business needs.

This hands-on leadership role suits someone who thrives in a fast-growing SaaS environment and enjoys turning regulatory requirements into scalable practices.