Senior GRC Manager: Build & Lead Our Compliance Program

Harris Computer; Pennsylvania; On-site; USD 130,000 - 150,000; Full time

Benefits offered by this job

Full benefits

Stock ownership

RRSP program

Flexible work

Vacation and personal days

Job summary

Harris Computer is seeking a Senior GRC Manager to own our governance, risk, and compliance program. You will work across engineering, security, and leadership to align HIPAA, GDPR, HITRUST, and SOC 2 efforts, maintaining policy documentation and audit evidence.

This is a hands-on senior role on the IT/ITSec team with no direct reports but strong collaboration with auditors and security engineers. You’ll help translate control requirements into practical, risk-based actions and drive continuous

Qualifications

• 5+ years in GRC, IT compliance, or information security compliance in a regulated industry.
• Hands-on experience maintaining an Information Security Management Program or similar.
• Knowledge of HIPAA, SOC 2, HITRUST, or GDPR; healthcare experience preferred.
• Experience working directly with external auditors.
• Strong ability to communicate risk to engineers and leadership, with clear policy language.
• Excellent writing skills; translate technical detail into policy.
• Organizational and multi-workstream management skills.
• Pragmatic risk approach: solve issues, not just document them.

Responsibilities

• Maintain ClearDATA's Information Security Management Program: policies, procedures, and standards.
• Support audits, assessments, and certifications for HIPAA, GDPR, HITRUST, SOC 2.
• Maintain the risk register, including third-party and vendor risk.
• Keep control mapping and audit evidence current and organized.
• Support incident response planning with IT/ITSec and security team.
• Translate control requirements into how systems are built and operated, delivering defensible audit evidence.
• Act as go-to compliance resource across the company for engineering, DevSecOps, management, and executives.

Job description

Harris Computer is seeking a Senior GRC Manager to own our governance, risk, and compliance program. You will work across engineering, security, and leadership to align HIPAA, GDPR, HITRUST, and SOC 2 efforts, maintaining policy documentation and audit evidence.

This is a hands-on senior role on the IT/ITSec team with no direct reports but strong collaboration with auditors and security engineers. You’ll help translate control requirements into practical, risk-based actions and drive continuous