Remote Senior Director, Information Risk & Governance

Modern Health; Northern (KY); Hybrid; USD 208,000 - 272,000; Full time

Job summary

Modern Health is seeking a Senior Director of Information Risk & Governance to lead cross-functional governance, risk, and assurance across information security, data, and AI initiatives. The role partners with legal, privacy, and engineering to drive risk-aware enterprise programs in a regulated healthcare context.

The position emphasizes executive reporting, vendor risk, incident management, and certification readiness, with the flexibility of remote work in the US.

Qualifications

• 10+ years in information-security risk management, governance, assurance, GRC, or security program leadership.
• 5+ years in a regulated PHI environment is preferred.
• Experience with SOC 2, HITRUST, HIPAA Security risk assessments, ISO 27001 readiness is valuable.

Responsibilities

• Own the information-security risk register and risk appetite model.
• Drive cross-functional risk decisions and board reporting.
• Run AI governance program operations and risk oversight.
• Own incident management as an enterprise program with escalation and remediation tracking.
• Lead data governance, classification, and secure data handling initiatives.
• Support certification and assurance programs (SOC 2, HITRUST, ISO 27001).

Skills

Information risk governance

Risk management

GRC

Executive reporting

Vendor risk

Incident management

Policy governance

Job description

Modern Health is seeking a Senior Director of Information Risk & Governance to lead cross-functional governance, risk, and assurance across information security, data, and AI initiatives. The role partners with legal, privacy, and engineering to drive risk-aware enterprise programs in a regulated healthcare context.

The position emphasizes executive reporting, vendor risk, incident management, and certification readiness, with the flexibility of remote work in the US.