Remote Security GRC Manager — SOC 2, HITRUST

Jobgether SRL; United States; Remote; USD 144,000 - 175,000; Full time

Benefits offered by this job

Remote position with location-based, U

Bonus compensation and equity

Healthcare coverage

Retirement plans

Paid time off

Job summary

Jobgether SRL, on behalf of a partner, seeks a Security GRC Manager in the United States to lead a growing GRC function in a remote-first environment focused on healthcare tech and data protection.

You will shape security policies, mature enterprise risk management, and oversee SOC 2 and HITRUST programs, collaborating across Engineering, Legal, People, and Finance. You will also lead AI governance, privacy compliance, third-party risk, and customer security assurance.

Qualifications

• 5–10 years in governance, risk, compliance or security.
• Active security certifications such as CISSP, CISA, or CISM.
• Experience leading SOC 2 and HITRUST attestation in high-growth settings.
• Knowledge of AI governance frameworks such as ISO/ IEC 42001 and privacy regs.
• Experience mentoring GRC analysts and building a program.
• Understanding HIPAA/HITECH and BAAs.
• Familiarity with SDLC security, IT environments, controls, and tools.
• Security tooling familiarity with Jira, AWS, Okta and similar platforms.

Responsibilities

• Lead and mentor a small GRC team and set priorities.
• Maintain a unified control library mapped to SOC 1/2 and HITRUST CSF.
• Oversee audits for SOC 1, SOC 2/HITRUST and customer audits.
• Partner with Legal on HIPAA/HITECH, BAAs, and privacy impact assessments.
• Develop AI governance aligned with ISO/IEC 42001 and manage risk registers.
• Review contracts covering security, privacy, data protection, and AI obligations.
• Use Drata to monitor controls and evidence.
• Improve policies, workflows, and operational efficiency.
• Lead business continuity planning and BIA-informed tests.
• Manage third-party risk and vendor assessments.
• Coordinate enterprise risk management activities.
• Develop security training and customer assurance responses.

Skills

GRC leadership

Risk assessment

Information security

HIPAA/HITECH knowledge

Team mentoring

Strategic security

Contract negotiation

SDLC security

Education

CISSP

CISA

CISM

Tools

Drata

CrowdStrike

Wiz

KnowBe4

Jamf

Arctic Wolf

AWS

Okta

Jira

Git/GitHub

Job description

Jobgether SRL, on behalf of a partner, seeks a Security GRC Manager in the United States to lead a growing GRC function in a remote-first environment focused on healthcare tech and data protection.

You will shape security policies, mature enterprise risk management, and oversee SOC 2 and HITRUST programs, collaborating across Engineering, Legal, People, and Finance. You will also lead AI governance, privacy compliance, third-party risk, and customer security assurance.