Remote GRC Leader - Security, Compliance & Risk

Cohere Health; Oregon; Hybrid; USD 133,000 - 145,000; Full time

Benefits offered by this job

Fully remote opportunity with about 5%

Medical, dental, vision, life, and EAP

401K with company match; FSA/HSA

Flex Time Off + holidays

Parental leave up to 14 weeks

Pet insurance

Bonus in compensation package

Job summary

Cohere Health’s Lead Governance, Risk and Compliance (GRC) Manager will drive enterprise security governance, risk management, and regulatory compliance across the organization. This hands‑on leadership role partners with Security, IT, Legal, Sales, and Customer Success to enable growth while strengthening controls and trust.

You’ll lead cross‑functional programs, deploy GRC platforms, and manage audits, with a focus on HITRUST, HIPAA, and ISO 27001.

Qualifications

• 8+ years of progressive experience in information security, governance, risk management, compliance, or IT audit.
• 2+ years leading GRC initiatives, programs, and/or teams.
• Certifications such as CISM, CISSP, CRISC, CISA, CGRC, or HITRUST CCSFP.
• Experience deploying and administering enterprise GRC platforms.
• Familiarity with the NIST CSF, NIST AI RMF, ISO 27017/18/42001, and privacy‑related security requirements.
• Background in healthcare technology, SaaS, AI/ML‑driven environments, or other highly regulated settings.

Responsibilities

• Lead and mature Cohere’s GRC program with scalable governance and KPIs.
• Deploy and optimize enterprise GRC platforms, including control mapping and reporting.
• Direct compliance initiatives across HITRUST, HIPAA, ISO 27001, and audits.
• Lead customer security assurance activities including security questionnaires and audits.
• Collaborate with Sales, Customer Success and Marketing on security materials and Trust Center.
• Review and negotiate security‑related contractual requirements with Legal.
• Oversee enterprise risk management activities including risk assessments and remediation tracking.
• Govern identity and access compliance including access reviews and certifications.
• Establish cross‑functional GRC engagement and align policies with priorities.
• Develop executive dashboards and reporting on compliance posture and risk.
• Build a scalable GRC function with repeatable processes and external assessors.

Skills

GRC leadership

Security governance

Risk management

Regulatory compliance

Customer assurance

Stakeholder management

Security program management

Executive communication

Incident response

Education

CISM

CISSP

CRISC

CISA

CGRC

HITRUST CCSFP

Tools

Vanta

ZenGRC

Drata

ServiceNow GRC

Anecdotes

Job description

Cohere Health’s Lead Governance, Risk and Compliance (GRC) Manager will drive enterprise security governance, risk management, and regulatory compliance across the organization. This hands‑on leadership role partners with Security, IT, Legal, Sales, and Customer Success to enable growth while strengthening controls and trust.

You’ll lead cross‑functional programs, deploy GRC platforms, and manage audits, with a focus on HITRUST, HIPAA, and ISO 27001.