GRC Security Lead: Risk, Compliance & Training

ARUP Laboratories; Salt Lake City (UT); On-site; USD 120,000 - 150,000; Full time

Job summary

ARUP Laboratories, based in Salt Lake City, UT, seeks an Information Security GRC Supervisor to lead ARUP's GRC program, aligning with policies, healthcare regulations, and the NIST RMF. You will translate regulatory and technical security requirements into practical, actionable guidance for IT teams and business owners.

You will educate and mentor a team of compliance professionals, manage audits, risk assessments, and governance activities, and deliver executive risk reporting to protect

Qualifications

• Experience leading GRC programs in healthcare or regulated environments
• Strong knowledge of NIST RMF, HIPAA, and security policies
• Ability to educate and train business owners and system owners in compliance requirements

Responsibilities

• Leads development and continual improvement of ARUP's GRC program and ensures alignment with policies and RMF.
• Serves as primary educator for ARUP Business Owners and System Owners in NIST SP 800-53 and ARUP policies.
• Designs and delivers training and guidance to foster risk ownership and control implementation.
• Oversees system-level risk assessments and translates technical requirements into actionable guidance for stakeholders.
• Maintains and updates security policies, standards, and procedures in line with regulatory requirements.
• Leads internal audits, external audit preparation, and remediation planning with executive reporting.
• Develops dashboards and metrics to communicate risk posture to leadership.
• Mentors a team of information security GRC analysts and cyber professionals.

Job description

ARUP Laboratories, based in Salt Lake City, UT, seeks an Information Security GRC Supervisor to lead ARUP's GRC program, aligning with policies, healthcare regulations, and the NIST RMF. You will translate regulatory and technical security requirements into practical, actionable guidance for IT teams and business owners.

You will educate and mentor a team of compliance professionals, manage audits, risk assessments, and governance activities, and deliver executive risk reporting to protect