Senior GRC Manager: Practical Compliance & Audit Readiness

Harris Computer; Minnesota; On-site; USD 130,000 - 150,000; Full time

Benefits offered by this job

Benefits package

3 weeks vacation + 5 personal days

Employee stock ownership

RRSP program

Flexible work arrangements

Job summary

ClearDATA is seeking a Senior GRC Manager to own our GRC program end to end, keeping HIPAA, GDPR, HITRUST and SOC 2 aligned while maintaining our Information Security Management Program. This is a hands-on role in our IT/ITSec team, working with security engineers, DevSecOps, auditors and leadership.

You will translate control requirements into how systems are built and operated, turning them into defensible audit evidence and up-to-date policy documentation.

Qualifications

• 5+ years in GRC, IT compliance, or information security compliance in a regulated industry.
• Hands-on experience maintaining an Information Security Management Program or similar program.
• Working knowledge of HIPAA, SOC 2, HITRUST, or GDPR; healthcare experience preferred.
• Experience working directly with external auditors.
• Ability to communicate risk clearly to engineers, DevSecOps, management and executives.
• Strong writing, documentation, and policy language skills.
• Organized and detail-oriented with multiple compliance workstreams.

Responsibilities

• Maintain and update the Information Security Management Program, policies, procedures, and standards.
• Support audits, assessments, and certification renewals for HIPAA, GDPR, HITRUST and SOC 2.
• Maintain risk registers and track third‑party and vendor risk.
• Keep control mapping and audit evidence current and organized.
• Collaborate with security engineers and DevSecOps to translate controls into build and operation.
• Partner with auditors to close compliance gaps before findings.
• Serve as the go-to compliance resource across engineering, management and leadership.

Skills

GRC

IT compliance

Audits

Policy writing

Risk management

Cross-functional collaboration

Documentation

GRC tools

Tools

Thoropass

OneTrust

GRC tooling

Job description

ClearDATA is seeking a Senior GRC Manager to own our GRC program end to end, keeping HIPAA, GDPR, HITRUST and SOC 2 aligned while maintaining our Information Security Management Program. This is a hands-on role in our IT/ITSec team, working with security engineers, DevSecOps, auditors and leadership.

You will translate control requirements into how systems are built and operated, turning them into defensible audit evidence and up-to-date policy documentation.