Senior GRC & Security Lead — Remote, Global Scale

Portage Ventures GP Inc.; Indiana; Remote; USD 120,000 - 190,000; Full time

Benefits offered by this job

Remote work flexibility

Stimulating environment

Job summary

Alan is transforming healthcare governance with a global team. We are hiring a senior GRC leader to own security governance and risk end-to-end across certifications and regulatory programs.

You’ll set direction, drive risk treatment, and mentor a junior GRC engineer as the team grows. Location is flexible with remote work options; you will collaborate with Legal, Internal Audit, Risk, and Engineering to build secure, scalable systems that protect member data and enable compliant growth.

Qualifications

• 6+ years in security with real GRC ownership.
• Experience running a GRC roadmap in certified or regulated environments (ISO 27001, HDS, SOC 2).
• Ability to explain framework requirements to business teams.
• Fluent in French and English.
• Willing to mentor and grow a team.

Responsibilities

• Own the full certification cycle (ISO 27001, HDS) and guide usage across teams.
• Provide security perspective on regulations and controls.
• Map and prioritize security risks, incl. AI risks, and turn into action plans.
• Define controls framework and educate teams; brief the board.
• Own incident governance and business continuity planning.
• Collaborate with engineering early in design to close control gaps.

Skills

GRC ownership

Security governance

Regulatory compliance

French

English

Education

ISO 27001 certification

SOC 2 awareness

Job description

Alan is transforming healthcare governance with a global team. We are hiring a senior GRC leader to own security governance and risk end-to-end across certifications and regulatory programs.

You’ll set direction, drive risk treatment, and mentor a junior GRC engineer as the team grows. Location is flexible with remote work options; you will collaborate with Legal, Internal Audit, Risk, and Engineering to build secure, scalable systems that protect member data and enable compliant growth.