Senior GRC Leader: Security, Risk & Compliance

coherehealth; United States; Presencial; USD 180.000 - 240.000; Tempo integral

Resumo da vaga

Cohere Health is seeking an experienced Lead Governance, Risk and Compliance (GRC) Manager to mature our enterprise security governance, risk management, regulatory compliance, and customer assurance programs. You will drive scalable processes and partner with Security, Legal, Sales, and Customer Success to advance our security posture and support business growth.

This hands-on leadership role requires independent delivery of complex initiatives, strong cross-functional influence, and a focus on

Qualificações

• 8+ years in information security, governance, risk management, compliance, or IT audit.
• 2+ years leading GRC initiatives or teams.
• Deep knowledge of HITRUST, ISO 27001, and HIPAA; managing assessments and audits.
• Experience deploying and administering enterprise GRC platforms (implementation, mapping, evidence, reporting).
• Familiarity with NIST frameworks and privacy-related security requirements.
• Strong project management, roadmaps, KPIs, and independent delivery.
• Proven experience with customer assurance programs (security questionnaires, audits).
• Experience with enterprise GRC tools (Vanta, ZenGRC, Drata, ServiceNow GRC).
• Excellent written/verbal communication and executive reporting skills.

Responsabilidades

• Lead and mature Cohere's GRC program with scalable governance, policies, risk management, and KPIs.
• Own deployment and optimization of enterprise GRC platforms; map controls, automate evidence, manage risk registers, monitor, and report.
• Direct HITRUST, HIPAA, ISO 27001 compliance initiatives; ensure audit readiness and control execution.
• Lead customer security assurance: questionnaires, due diligence, audits, executive briefings with clients.
• Partner with Sales/CS/Marketing to create security GTM materials, Trust Center, and strengthen security as a differentiator.
• Negotiate security contract requirements with Legal, including DPAs, BAAs, exhibits.
• Oversee risk management: assessments, remediation tracking, exceptions, SLAs across Eng, Platform, DevOps, Data.
• Govern identity and access compliance: reviews, privileged certs, separation of duties, remediation.
• Establish cross-functional GRC engagement aligning policies, controls, ownership with operations.
• Deliver executive dashboards and reports on compliance posture, risk, remediation, and assurance metrics.
• Build and scale GRC function with repeatable processes, team capability, external assessors, continuous improvement.

Conhecimentos

GRC leadership

InfoSec

Risk management

Regulatory compliance

Audit readiness

Vendor risk

Security frameworks

Cross-functional leadership

Formação

CISM

CISSP

CRISC

CISA

HITRUST CCSFP

Ferramentas

Vanta

ZenGRC

Drata

ServiceNow GRC

Anecdotes

Descrição da vaga

Cohere Health is seeking an experienced Lead Governance, Risk and Compliance (GRC) Manager to mature our enterprise security governance, risk management, regulatory compliance, and customer assurance programs. You will drive scalable processes and partner with Security, Legal, Sales, and Customer Success to advance our security posture and support business growth.

This hands-on leadership role requires independent delivery of complex initiatives, strong cross-functional influence, and a focus on