IT Security & GRC Lead

UCSF Health, AG; San Francisco (CA); Sur place; USD 160 000 - 210 000; Plein temps

Résumé du poste

UCSF Health is seeking a Head of Governance, Risk, and Compliance to lead enterprise cyber risk and compliance programs across UCSF Health, Campus, Foundation, and affiliates. You will direct a GRC team, coordinate audits, and guide risk-based decisions, including AI-related risk initiatives, service management workflows, and policy interpretation.

You will interface with senior leaders and auditors, shaping risk strategies in healthcare and education environments, with a focus on PCI DSS,

Qualifications

• Bachelor's degree in a related area or equivalent experience.
• Minimum of five (5) years of progressively responsible experience in cybersecurity, information security, governance, risk and compliance (GRC), or related field.
• Advanced knowledge of cybersecurity, privacy, and compliance laws, regulations, standards, and policy frameworks relevant to healthcare and higher education.
• Experience directing and coordinating work of technical or risk/compliance staff.
• Experience providing day-to-day functional leadership for a security, risk, or compliance program.
• Advanced experience leading risk assessments, compliance reviews, remediation planning, and risk-based decision-making.
• Ability to communicate risk and action plans to senior leadership and stakeholders.
• Experience with audits, vendor risk management, and security workflow improvements.

Responsabilités

• Lead enterprise GRC program and day-to-day execution of risk and compliance services.
• Direct staff, mentor, train, and oversee quality controls across assessments and remediation.
• Interface with senior stakeholders, auditors, and business owners.
• Develop and improve security workflows, metrics, and reporting; drive program improvements.
• Oversee third-party reviews, contract reviews, and risk acceptance decisions.

Connaissances

GRC leadership

Cybersecurity risk management

Policy & standards

Contract reviews

Auditing

Third-party risk

AI in security

Stakeholder comms

Formation

Bachelor's degree in a related field

Outils

ServiceNow IRM

GRC platforms

ITSM

PCI DSS / HIPAA compliance

Description du poste

UCSF Health is seeking a Head of Governance, Risk, and Compliance to lead enterprise cyber risk and compliance programs across UCSF Health, Campus, Foundation, and affiliates. You will direct a GRC team, coordinate audits, and guide risk-based decisions, including AI-related risk initiatives, service management workflows, and policy interpretation.

You will interface with senior leaders and auditors, shaping risk strategies in healthcare and education environments, with a focus on PCI DSS,