Senior GRC Manager: Hands-On Compliance, Audits & Risk

Harris Computer; Mississippi; On-site; USD 130,000 - 150,000; Full time

Benefits offered by this job

Full benefits package medical, dental,

3 weeks of vacation plus 5 personal

Employee stock ownership and RRSP

Job summary

ClearDATA, backed by Harris Computer, is seeking a Senior GRC Manager to own the GRC program end to end, aligning with HIPAA, GDPR, HITRUST, SOC 2, and other standards. You will manage policies, evidence, and audit cycles, collaborating with auditors and security teams to ensure practical, risk-based compliance.

This hands-on senior role reports to IT/ITSec leadership and requires strong writing skills and the ability to communicate risk clearly to engineers and executives.

Qualifications

• 5+ years in GRC, IT compliance, or information security compliance in a regulated industry.
• Experience maintaining an information security management or similar compliance program.
• Knowledge of HIPAA, SOC 2, HITRUST, GDPR; healthcare experience preferred.
• Experience working with external auditors.
• Ability to work with engineers and leadership; clear risk communication.
• Strong writing skills for policy language.
• Organized with multiple compliance workstreams.
• Pragmatic approach to risk.

Responsibilities

• Maintain Information Security Management Program policies, procedures, and standards.
• Support audits, assessments, and certification renewals (HIPAA, GDPR, HITRUST, SOC 2).
• Maintain risk register and vendor risk tracking.
• Keep control mapping and audit evidence current.
• Support incident response planning with IT/ITSec.
• Translate control requirements into how systems are built and audited.

Skills

GRC experience

Audit coordination

Policy writing

Risk assessment

Cross-functional collaboration

Compliance documentation

Education

CISA

HITRUST CCSFP

CRISC

Tools

OneTrust

Thoropass

AWS

Job description

ClearDATA, backed by Harris Computer, is seeking a Senior GRC Manager to own the GRC program end to end, aligning with HIPAA, GDPR, HITRUST, SOC 2, and other standards. You will manage policies, evidence, and audit cycles, collaborating with auditors and security teams to ensure practical, risk-based compliance.

This hands-on senior role reports to IT/ITSec leadership and requires strong writing skills and the ability to communicate risk clearly to engineers and executives.