Remote Security GRC Leader: SOC2, HITRUST & AI Governance

Bazeta; Northern (KY); Remote; USD 144,000 - 175,000; Full time

Benefits offered by this job

Bonus opportunities

Equity participation

Job summary

Rightway is seeking a Security GRC Manager to own and mature the GRC function, enhancing policies and procedures, and leading the team through SOC 2, HITRUST, and privacy programs.

You will partner with Legal on data privacy, manage audits, and drive AI governance with ISO/IEC 42001 alignment, while coordinating with Engineering, IT, and Finance to ensure risk remediation and control effectiveness.

Qualifications

• 5–10 years of related work experience.
• Maintains relevant certifications (e.g., CISSP, CISA, CISM).
• Led SOC2 with HITRUST CSF certification in a high growth environment.
• Familiarity with AI governance frameworks (ISO/IEC 42001).

Responsibilities

• Lead and mentor a GRC team, setting priorities and reviewing work.
• Own and evolve the control library for SOC 2, SOC 1, and HITRUST.
• Lead audit programs with cross-functional partners for SOC 1, SOC 2/HITRUST and customer audits.
• Partner with Legal on data privacy, BAAs, and data handling requirements.
• Develop and maintain AI governance program including risk registers and SOA.

Skills

Leadership

GRC program management

Risk assessment

HIPAA/HITECH knowledge

AI governance

Stakeholder communication

Education

CISSP

CISA

CISM

Tools

Jamf

CrowdStrike

Arctic Wolf

Wiz

Serval

KnowBe4

Drata

AWS

Okta

JIRA

Git/GitHub

Job description

Rightway is seeking a Security GRC Manager to own and mature the GRC function, enhancing policies and procedures, and leading the team through SOC 2, HITRUST, and privacy programs.

You will partner with Legal on data privacy, manage audits, and drive AI governance with ISO/IEC 42001 alignment, while coordinating with Engineering, IT, and Finance to ensure risk remediation and control effectiveness.