Senior GRC Manager: Drive Practical, Audit-Ready Compliance

MediSolution; Northern (KY); Hybrid; USD 135,000 - 165,000; Full time

Benefits offered by this job

Full benefits package (medical, dental

Flexible work arrangements

3 weeks vacation + 5 personal days

Employee stock ownership and RRSP

Community involvement opportunities

Job summary

Harris Computer is seeking a Senior GRC Manager to own the GRC program end-to-end, aligning with HIPAA, GDPR, HITRUST and SOC 2. This hands-on role will maintain the Information Security Management Program, manage audit cycles, and work with auditors to ensure up-to-date policies and control mappings.

The ideal candidate has 5+ years in GRC/information security compliance, direct experience with audits, and strong ability to translate technical detail into policy language.

Qualifications

• 5+ years in GRC, IT compliance, or information security compliance.
• Direct experience maintaining an Information Security Management Program or similar.

Responsibilities

• Governance, Risk & Compliance ownership for the program.
• Maintain information security management program policies, procedures, and standards.
• Support audits, assessments, and certification renewals (HIPAA, GDPR, HITRUST, SOC 2).
• Maintain the risk register including third-party and vendor risk.
• Keep control mapping and audit evidence current and organized.
• Coordinate with auditors to close gaps before findings arise.
• Act as the go-to compliance resource across the company.

Skills

GRC

Audits & audit evidence

Policy language

Risk management

Cloud compliance

cross-functional collaboration

Executive communication

Tools

Thoropass

OneTrust

AWS

Azure

GCP

Job description

Harris Computer is seeking a Senior GRC Manager to own the GRC program end-to-end, aligning with HIPAA, GDPR, HITRUST and SOC 2. This hands-on role will maintain the Information Security Management Program, manage audit cycles, and work with auditors to ensure up-to-date policies and control mappings.

The ideal candidate has 5+ years in GRC/information security compliance, direct experience with audits, and strong ability to translate technical detail into policy language.