Remote Senior GRC Leader - Scale Security & Compliance

Cohere Health; United States; Remote; USD 133,000 - 145,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Life insurance

Disability insurance

Employee Assistance Program

401(k) with company match

FSA/HSA

Job summary

Cohere Health is seeking a Lead Governance, Risk and Compliance Manager to mature and run our enterprise GRC program across governance, risk management, and regulatory compliance. You will own the deployment of GRC platforms, drive audit readiness for HITRUST, ISO 27001, and HIPAA, and lead customer assurance activities with security questionnaires and client engagements.

You will partner with Security, Legal, Sales, and Customer Success to build scalable processes, establish a Trust Center, and

Qualifications

• 8+ years in information security, governance, risk, or IT audit with 2+ years leading GRC initiatives.
• Professional certifications such as CISM, CISSP, CRISC, CISA, CGRC, or HITRUST CCSFP.
• Deep knowledge of HITRUST, ISO 27001, and HIPAA with audits and certification readiness.
• Evidence of deploying enterprise GRC platforms, including mapping, evidence collection and reporting.
• Familiarity with NIST Cybersecurity Framework and privacy-related security requirements.
• Strong project and program management with KPI-driven delivery.
• Experience with customer assurance programs and security discussions with clients.
• Ability to partner with Sales, Customer Success, and Legal to develop assurance materials.

Responsibilities

• Lead and mature the GRC program with scalable governance, procedures, and metrics.
• Deploy and optimize enterprise GRC platforms and reporting.
• Direct compliance initiatives across HITRUST, ISO 27001, HIPAA; maintain audit readiness.
• Lead customer security assurance activities and security questionnaires.
• Develop security-focused go-to-market materials and a Trust Center.
• Review security contracts, DPAs, and BAAs with Legal.
• Oversee enterprise risk management, remediation tracking, and SLAs.
• Govern identity and access compliance and remediation of deficiencies.
• Engage cross-functionally to align policies, controls, and risk with priorities.
• Deliver executive dashboards and risk reporting; build a scalable GRC team.

Skills

GRC leadership

Information security

Risk management

Compliance management

Stakeholder management

Audit & certifications

Security frameworks

Vendor / third-party risk

Tools

Vanta

Anecdotes

ZenGRC

Drata

ServiceNow GRC

Job description

Cohere Health is seeking a Lead Governance, Risk and Compliance Manager to mature and run our enterprise GRC program across governance, risk management, and regulatory compliance. You will own the deployment of GRC platforms, drive audit readiness for HITRUST, ISO 27001, and HIPAA, and lead customer assurance activities with security questionnaires and client engagements.

You will partner with Security, Legal, Sales, and Customer Success to build scalable processes, establish a Trust Center, and