Senior GRC Manager - Hands-on Security & Compliance

Harris Computer; Illinois; On-site; USD 130,000 - 150,000; Full time

Benefits offered by this job

We empower our employees to make a dif

Award-winning culture

Opportunity to learn

Employee stock ownership

RRSP program

Job summary

ClearDATA seeks a Senior GRC Manager to own the GRC program end to end, aligning HIPAA, GDPR, HITRUST, SOC 2, and other standards. You will maintain the Information Security Management Program, manage audit cycles, and work directly with auditors, ensuring policy and compliance docs evolve with systems and vendors.

This is a hands-on senior IT/ITSec role without direct reports, collaborating with security engineers, DevSecOps, and leadership to translate control requirements into practical,

Qualifications

• 5+ years in GRC, IT compliance, or information security compliance in a regulated environment.
• Hands-on experience maintaining a security/compliance program.
• Direct experience working with external auditors.

Responsibilities

• Own and maintain the Information Security Management Program and related policies, procedures, and standards.
• Support audits, assessments, and certification renewals (HIPAA, GDPR, HITRUST, SOC 2).
• Manage risk registers and vendor risk; ensure evidence is current and organized.
• Collaborate with security engineers/DevSecOps to translate controls into build and evidence.

Skills

GRC expertise

Auditor liaison

Policy writing

Risk assessment

Cross-functional collaboration

Tools

Thoropass

OneTrust

Job description

ClearDATA seeks a Senior GRC Manager to own the GRC program end to end, aligning HIPAA, GDPR, HITRUST, SOC 2, and other standards. You will maintain the Information Security Management Program, manage audit cycles, and work directly with auditors, ensuring policy and compliance docs evolve with systems and vendors.

This is a hands-on senior IT/ITSec role without direct reports, collaborating with security engineers, DevSecOps, and leadership to translate control requirements into practical,