Senior GRC Lead: Compliance Strategy & Risk Programs

Harris Computer; South Dakota; On-site; USD 130,000 - 150,000; Full time

Benefits offered by this job

Full benefits package

3 weeks vacation + 5 personal days

Employee stock ownership and RRSP

Job summary

ClearDATA is seeking a Senior GRC Manager to own the GRC program end to end, ensuring HIPAA, GDPR, HITRUST, and SOC 2 compliance. You will maintain the Information Security Management Program, manage audits, and work directly with auditors, keeping policy and evidence current as systems and vendors evolve.

This hands-on, senior role sits on the IT/ITSec team. You’ll collaborate with security engineers and DevSecOps, translating control requirements into tangible system designs and audit

Qualifications

• 5+ years in GRC, IT compliance, or information security compliance in a regulated environment.
• Hands-on role with practical implementation, not just advisory.
• Experience maintaining an Information Security Management Program or similar.
• Direct experience working with external auditors.
• Strong writing skills to translate technical detail into policy language.
• Organized and detail-oriented with multi-workstream management.
• Pragmatic risk mindset: distinguish real issues from theoretical ones.

Responsibilities

• Own and govern the Information Security Management Program, policies, procedures, and standards.
• Support audits, assessments, and certification renewals (HIPAA, GDPR, HITRUST, SOC 2).
• Maintain the risk register, including third-party/vendor risk.
• Keep control mapping and audit evidence current and organized.
• Collaborate with engineers/DevSecOps to translate controls into built systems and evidence.
• Act as the go-to compliance resource across the company and leadership.

Skills

GRC experience

Audit coordination

Policy writing

Risk assessment

Tools

Thoropass

OneTrust

GRC tooling

Job description

ClearDATA is seeking a Senior GRC Manager to own the GRC program end to end, ensuring HIPAA, GDPR, HITRUST, and SOC 2 compliance. You will maintain the Information Security Management Program, manage audits, and work directly with auditors, keeping policy and evidence current as systems and vendors evolve.

This hands-on, senior role sits on the IT/ITSec team. You’ll collaborate with security engineers and DevSecOps, translating control requirements into tangible system designs and audit