Security GRC Leader: SOC2, HITRUST & AI Governance

Openkrill; United States; Remote; USD 144,000 - 175,000; Full time

Job summary

Rightway is seeking a Security GRC Manager to mature our governance, risk, and compliance program. You will lead a small team, evolve control libraries, partner with Legal on data privacy, and own AI governance aligned to ISO42001 and ADMTA requirements.

You will drive audit readiness across SOC 2/HITRUST, risk assessments, and third party risk management, while collaborating with Legal, Engineering, and Finance to protect the organization.

Qualifications

• 5–10 years of related work experience.
• Maintains a certification relevant to the role (e.g., CISSP, CISA, CISM).
• Experience leading SOC2 with HITRUST CSF certification in a high growth environment.

Responsibilities

• Lead and mentor a small GRC team, setting priorities and reviewing work.
• Own and evolve a unified control library across SOC 2, SOC 1, and HITRUST.
• Lead audit programs with Engineering, IT, People, and Finance for SOC 1/2/HITRUST audits.
• Partner with Legal on Data Privacy programs, HIPAA/HITECH, BAAs, assessments.
• Own and mature AI governance program aligned to ISO/IEC 42001 and ADMTA considerations.
• Review security contracts for risk, data protection, and audit rights.
• Monitor control effectiveness in Drata and drive continuous improvement.
• Collaborate to improve policies and procedures for efficiency and compliance.
• Lead Business Continuity Planning and Third Party Risk Management initiatives.
• Own security risk management program and annual risk assessments.
• Develop and implement security/compliance training; strengthen customer trust.

Skills

GRC Leadership

SOC2/HITRUST

HIPAA/HITECH

AI Governance

BAA negotiation

Risk Assessment

ISO42001 familiarity

Leadership/mentoring

SDLC tooling

Tools

Jamf

CrowdStrike

Arctic Wolf

Wiz

Serval

Knowbe4

Drata

AWS

Okta

JIRA

GIT/GITHUB

Job description

Rightway is seeking a Security GRC Manager to mature our governance, risk, and compliance program. You will lead a small team, evolve control libraries, partner with Legal on data privacy, and own AI governance aligned to ISO42001 and ADMTA requirements.

You will drive audit readiness across SOC 2/HITRUST, risk assessments, and third party risk management, while collaborating with Legal, Engineering, and Finance to protect the organization.