Remote Security Awareness & GRC Leader

HealthEquity, Inc.; Mission, Northern (TX, KY); Hybrid; USD 121,000 - 157,000; Full time

Benefits offered by this job

Medical, dental, and vision

HSA contribution and match

Dependent care FSA match

Uncapped paid time off

Paid parental leave

401(k) match

Education and tuition assistance

Gym and wellness reimbursement

Job summary

HealthEquity, Inc. is seeking a Senior Manager of Security Awareness & GRC to lead enterprise human risk management and culture strategy.

You will own phishing simulations, required training, onboarding, executive messaging, and security campaigns that translate risk into actionable teammate behavior across the organization. You will partner with Security, GRC, Fraud, Privacy, Legal, HR, IT, Marketing, Product Security, and others to ensure security expectations are understood and embedded in

Qualifications

• Bachelor’s Degree in information security, IT, communications, marketing, or related discipline preferred.
• 7+ years in security awareness, human risk management, or related enterprise programs.
• Proven ability to translate complex risk concepts into clear business communications.

Responsibilities

• Lead enterprise security awareness, phishing simulations, and training programs.
• Design and execute campaigns that drive measurable behavior change.
• Partner with multiple departments to embed security culture across the organization.
• Develop metrics to assess program effectiveness and report to leadership.
• Mentor a team of security awareness specialists and drive cross‑functional collaboration.

Skills

Security awareness

Human risk management

Security culture

Executive communication

Education

Bachelor’s Degree in information security / related field

Tools

Microsoft Office 365

Job description

HealthEquity, Inc. is seeking a Senior Manager of Security Awareness & GRC to lead enterprise human risk management and culture strategy.

You will own phishing simulations, required training, onboarding, executive messaging, and security campaigns that translate risk into actionable teammate behavior across the organization. You will partner with Security, GRC, Fraud, Privacy, Legal, HR, IT, Marketing, Product Security, and others to ensure security expectations are understood and embedded in