Remote Senior GRC Manager: HIPAA, SOC 2 & HITRUST

Virta Health; United States; Remote; USD 150,000 - 210,000; Full time

Job summary

Virta Health is seeking a Senior Manager of GRC to lead the governance, risk, and compliance program in a highly automated, AI-first environment. You will champion HIPAA, HITRUST CSF, and SOC 2, partnering with Sales to support security reviews and responses to enterprise evaluations.

You'll own policy lifecycle, vendor risk, and executive risk reporting while scaling automation with Vanta or Drata, and mentor teams across IT, security engineering, and product to embed strong compliance into our

Qualifications

• 7+ years in Cybersecurity GRC/IT Auditing/InfoSec Compliance; 2+ years leading teams in regulated environments.
• Hands-on experience with HITRUST CSF, HIPAA, and SOC 2 in practice.
• Proven SaaS GRC automation using Vanta or Drata to scale compliance programs.
• Excellent client-facing communication with sales and CS for security reviews and RFPs.
• Designed AI-enabled workflows to address bottlenecks and boost efficiency.
• Ability to balance risk tolerance with regulatory and operational needs.
• Strong cross-functional leadership to align security objectives across teams.

Responsibilities

• Lead GRC & Compliance Automation; scale Vanta to automate evidence collection.
• Support Sales in security reviews and RFP responses.
• Own policy lifecycle, exceptions, vendor risk, and executive risk reporting.
• Manage security queue and design frictionless ticketing/workflows.
• Coordinate across IT, security engineering, and product for AI governance.
• Develop security awareness and training programs for all staff.

Skills

GRC Leadership

HIPAA & SOC 2

HITRUST CSF

SaaS GRC automation

Vendor risk management

Security audits

Client-facing

AI workflow automation

Tools

Vanta

Drata

Job description

Virta Health is seeking a Senior Manager of GRC to lead the governance, risk, and compliance program in a highly automated, AI-first environment. You will champion HIPAA, HITRUST CSF, and SOC 2, partnering with Sales to support security reviews and responses to enterprise evaluations.

You'll own policy lifecycle, vendor risk, and executive risk reporting while scaling automation with Vanta or Drata, and mentor teams across IT, security engineering, and product to embed strong compliance into our