Senior GRC Manager: Lead Practical, Risk‑Based Compliance

Harris Computer; New York (NY); On-site; USD 130,000 - 150,000; Full time

Benefits offered by this job

Full benefits package (medical, dental

Vision, STD, Life benefits)

3 weeks vacation + 5 personal days

Employee stock ownership and RRSP

Job summary

ClearDATA seeks a Senior GRC Manager to own our GRC program end to end, aligning with HIPAA, GDPR, HITRUST and SOC 2. Youll manage our Information Security Management Program, support audits, and keep policy and compliance documentation accurate as systems and vendors evolve.

This is a hands-on, senior IT/ITSec role with no direct reports, but collaboration with security engineers, DevSecOps, and leadership to translate controls into auditable evidence and practical security postures.

Qualifications

• 5+ years in GRC, IT compliance, or information security compliance.
• Direct experience maintaining an Information Security Management Program or similar.
• Working knowledge of HIPAA, SOC 2, HITRUST, or GDPR; healthcare experience preferred.

Responsibilities

• Maintain ClearDATA's Information Security Management Program: the policies, procedures, and standards behind our security and compliance posture.
• Support audits, assessments, and certification renewals for HIPAA, GDPR, HITRUST, and SOC 2.
• Maintain the risk register, including tracking third-party and vendor risk.
• Keep control mapping and audit evidence current and organized.
• Support incident response planning alongside the IT/ITSec Manager and security team.
• Partner with security engineers and DevSecOps to translate control requirements into how systems are actually built and operated — and to turn what they've built into defensible audit evidence.

Skills

GRC management

Audit coordination

Regulatory compliance

Policy writing

Cross-functional collaboration

Education

Bachelor's degree in a related field

Tools

OneTrust

Thoropass

Job description

ClearDATA seeks a Senior GRC Manager to own our GRC program end to end, aligning with HIPAA, GDPR, HITRUST and SOC 2. Youll manage our Information Security Management Program, support audits, and keep policy and compliance documentation accurate as systems and vendors evolve.

This is a hands-on, senior IT/ITSec role with no direct reports, but collaboration with security engineers, DevSecOps, and leadership to translate controls into auditable evidence and practical security postures.