Security Governance, Risk & Compliance Director

Beth Israel Lahey Health; Boston (MA); On-site; USD 176,800 - 205,920; Full time

Job summary

Beth Israel Lahey Health seeks a Director of Security Governance, Risk & Compliance to lead the GRC function and partner with IT Security to manage an organization-wide risk program in a health-system setting.

Responsibilities include strategy, policy development, audits, training, and senior-management advisory on security controls and regulatory compliance. Role requires extensive healthcare IT security experience and leadership capabilities.

Qualifications

• Bachelor’s degree required; Master’s degree in Law preferred.
• 10+ years related work experience required with 3–5 years supervisory/management experience.
• Experience in healthcare industry and information security program management essential.
• Knowledge of information security technologies, medical records and patient privacy is required.

Responsibilities

• Lead and manage the Governance, Risk and Compliance (GRC) function and partner with IT Security Leader on organization-wide risk management and security compliance programs.
• Collaborate with executive leadership to establish a shared vision for information security and develop compliance programs.
• Oversee IT Security Steering Committee, governance procedures, and policy development to strengthen security posture.
• Provide risk-mitigating directives for projects with IT components and ensure security considerations are integrated into plans.
• Develop, implement and deliver security training and awareness programs across the organization.
• Coordinate internal/external audits using industry-standard methods to strengthen controls.
• Investigate security incidents, develop remediation plans and drive resolutions with stakeholders.
• Serve as a trusted security advisor to senior management and IT Shared Services and ensure policy alignment with regulatory requirements.
• Stay current with IT security, governance, and compliance trends and participate in industry events.

Skills

Information security leadership

Governance & risk management

Stakeholder collaboration

Policy development

Education

Bachelor’s degree

Master’s degree in Law

Job description

Beth Israel Lahey Health seeks a Director of Security Governance, Risk & Compliance to lead the GRC function and partner with IT Security to manage an organization-wide risk program in a health-system setting.

Responsibilities include strategy, policy development, audits, training, and senior-management advisory on security controls and regulatory compliance. Role requires extensive healthcare IT security experience and leadership capabilities.