GRC Security Lead: SOC 2, HITRUST & Risk Management

Infinite Computer Solutions; Campus (IL); On-site; USD 120,000 - 180,000; Full time

Job summary

Infinite Computer Solutions is seeking an experienced GRC lead to drive compliance, security audits, privacy, and risk management. The role collaborates with the CISO, engineering, product, cloud, privacy, legal, HR, internal audit, and business stakeholders.

The ideal candidate should have 6+ years in compliance-related fields and strong experience with SOC 2 Type II and HITRUST. The position requires coordinating external auditors, developing security policies, and embedding security into the

Qualifications

• 7–10 years of experience in security compliance, audits, privacy, business continuity and risk management.
• Hands-on experience in SOC 2 Type II and HITRUST implementation and audit management.
• Experience conducting internal audits, control assessments, risk assessments, and compliance gap assessments.

Responsibilities

• Own end-to-end SOC 2 Type II & HITRUST programs, including readiness, control implementation, evidence management, remediation, and assessment activities.
• Establish and maintain the organization's security compliance framework aligned with regulatory and customer requirements.
• Coordinate with external auditors, assessors, and certification bodies.
• Develop, maintain, and continuously improve security policies, standards, procedures, and control frameworks.
• Perform security risk assessments and support enterprise and product-level risk management. Maintain risk registers, control matrices, compliance dashboards, and management reporting.
• Plan and execute periodic internal security audits. Identify gaps, risks, and opportunities for improvement. Develop remediation plans and track closure for external audits.
• Partner with engineering and product teams to embed security and compliance requirements into the product development lifecycle.
• Work with cloud, DevOps, application security, infrastructure, and engineering teams to ensure sustainable compliance.
• Own and drive the organization's security awareness program. Track awareness metrics and report program effectiveness to senior leadership.
• Lead cross-functional compliance initiatives and drive accountability for control owners. Present security posture, risks, audit findings, and remediation status to senior management.
• Demonstrate the ability to communicate complex security and compliance topics in a simple, business-oriented manner.

Skills

Security compliance

Audits

Privacy

Risk management

Communication skills

Cross-functional collaboration

Education

B.E

Job description

Infinite Computer Solutions is seeking an experienced GRC lead to drive compliance, security audits, privacy, and risk management. The role collaborates with the CISO, engineering, product, cloud, privacy, legal, HR, internal audit, and business stakeholders.

The ideal candidate should have 6+ years in compliance-related fields and strong experience with SOC 2 Type II and HITRUST. The position requires coordinating external auditors, developing security policies, and embedding security into the