Senior GRC Lead: Risk, Policy & Audit

Harris Computer; Missouri; On-site; USD 130,000 - 150,000; Full time

Benefits offered by this job

Flexible work arrangements

Full benefits package

3 weeks vacation + 5 personal days

Employee stock ownership

RRSP program

Job summary

Harris Computer seeks a Senior GRC Manager to own the GRC program end-to-end, aligning HIPAA, GDPR, HITRUST, and SOC 2. You will maintain the Information Security Management Program, manage audits and vendor risk, and produce accurate policy documentation as systems evolve.

This hands-on senior role collaborates with security engineers, DevSecOps and leadership, translating control requirements into practical build and audit evidence. You’ll drive risk-based decisions with a pragmatic mindset.

Qualifications

• 5+ years in GRC, IT compliance or information security compliance in hands-on roles.
• Experience maintaining an Information Security Management Program or similar.
• Working knowledge of HIPAA, SOC 2, HITRUST or GDPR; healthcare exp. preferred.
• Experience with external auditors; ability to communicate risk clearly.

Responsibilities

• Maintain and evolve the Information Security Management Program, policies, procedures and standards.
• Support audits, assessments and certification renewals for HIPAA, SOC 2 and GDPR.
• Manage risk register and vendor risk; keep control mapping and evidence current.
• Collaborate with security engineers and DevSecOps to translate controls into systems.
• Act as go-to compliance resource across teams and leadership; close gaps with auditors.

Education

Certifications: CISA, HITRUST CCSFP, CRISC

Tools

Thoropass

OneTrust

Job description

Harris Computer seeks a Senior GRC Manager to own the GRC program end-to-end, aligning HIPAA, GDPR, HITRUST, and SOC 2. You will maintain the Information Security Management Program, manage audits and vendor risk, and produce accurate policy documentation as systems evolve.

This hands-on senior role collaborates with security engineers, DevSecOps and leadership, translating control requirements into practical build and audit evidence. You’ll drive risk-based decisions with a pragmatic mindset.