Hands-On GRC Manager (HIPAA/SOC 2)

Harris Computer; Kansas; On-site; USD 130,000 - 150,000; Full time

Benefits offered by this job

Plenty of opportunities to grow your?

Full benefits package (medical, dental

3 weeks of vacation + 5 personal days

Employee stock ownership and RRSP

Flexible work arrangements

Job summary

Harris Computer, via its ClearDATA division, seeks a Senior GRC Manager to own the GRC program end to end, aligning HIPAA, GDPR, HITRUST and SOC 2. You will work with auditors and security engineers to translate control requirements into practical system builds and defensible audit evidence.

You will update policies as vendors change, maintain the risk register, and provide leadership with a clear read on governance and compliance status.

Qualifications

• Five plus years in GRC, IT compliance, or information security compliance.
• Direct experience maintaining an information security management program.

Responsibilities

• Maintain ClearDATA's Information Security Management Program: the policies, procedures, and standards behind our security and compliance posture.
• Support audits, assessments, and certification renewals for HIPAA, GDPR, HITRUST, and SOC 2.
• Maintain the risk register, including tracking third-party and vendor risk.
• Keep control mapping and audit evidence current and organized.
• Support incident response planning alongside the IT/ITSec Manager and security team.
• Translate control requirements into how systems are built and operated, turning builds into defensible audit evidence.
• Update policies and program documentation as systems, vendors, or ownership of shared responsibilities change.
• Work directly with auditors to catch and close compliance gaps before they become findings.
• Be the go-to compliance resource across the company, helping teams find a workable path forward and giving leadership a clear read on the program's status.

Job description

Harris Computer, via its ClearDATA division, seeks a Senior GRC Manager to own the GRC program end to end, aligning HIPAA, GDPR, HITRUST and SOC 2. You will work with auditors and security engineers to translate control requirements into practical system builds and defensible audit evidence.

You will update policies as vendors change, maintain the risk register, and provide leadership with a clear read on governance and compliance status.