Senior GRC Manager — Flexible, Audit‑Driven Security Lead

Harris Computer; Colorado; On-site; USD 130,000 - 150,000; Full time

Benefits offered by this job

We empower our employees to make a dif

We have an award-winning culture

We offer opportunity to learn

We are financially strong and we are

We have fun!

Job summary

ClearDATA is seeking a Senior GRC Manager to own our GRC program end to end, aligning HIPAA, GDPR, HITRUST, SOC 2, and more. You will maintain the Information Security Management Program and manage audits with auditors, ensuring policy and compliance evolve with systems and vendors.

This is a hands-on, senior IT/ITSec role. You’ll work with security engineers, DevSecOps, and leadership, translating control requirements into practical implementation and defensible audit evidence.

Qualifications

• 5+ years in GRC, IT compliance, or security compliance, hands-on.
• Direct experience maintaining an Information Security Management Program or similar compliance program.
• Working knowledge of HIPAA, SOC 2, HITRUST, or GDPR; healthcare experience preferred.
• Experience working with external auditors.
• Ability to work across a technical organization and up to executive leadership.

Responsibilities

• Own and maintain ClearDATA's Information Security Management Program, policies, procedures and standards.
• Support audits, assessments and certification renewals.
• Maintain risk register including third-party/vendor risk.
• Keep control mapping and audit evidence current and organized.
• Partner with security engineers and DevSecOps to translate control requirements into practical builds and evidence.
• Act as go-to compliance resource across the company.

Skills

GRC experience

Audits & compliance

Policy writing

Risk management

Cross-functional collaboration

Tools

Thoropass

OneTrust

Job description

ClearDATA is seeking a Senior GRC Manager to own our GRC program end to end, aligning HIPAA, GDPR, HITRUST, SOC 2, and more. You will maintain the Information Security Management Program and manage audits with auditors, ensuring policy and compliance evolve with systems and vendors.

This is a hands-on, senior IT/ITSec role. You’ll work with security engineers, DevSecOps, and leadership, translating control requirements into practical implementation and defensible audit evidence.