Strategic Cyber GRC Manager: Risk & Compliance Leader

Lurie Children's Hospital; Chicago (IL); On-site; USD 120,000 - 197,000; Full time

Benefits offered by this job

Medical Insurance

PTO & Holidays

Retirement Plan (403b)

Job summary

Lurie Childrens Hospital of Chicago seeks an experienced cybersecurity leader to manage the organization’s GRC program, strengthening security posture and ensuring compliance with NIST CSF, PCI DSS, HIPAA and HITECH. Youll lead the GRC team, develop policies, and drive risk assessments and audits across departments.

Requirements include a Bachelors degree, relevant certifications (CISM/CISSP/CISA), and 5–7 years in GRC with 2+ in management.

Qualifications

• 56 years07 experience in cybersecurity GRC, including at least 2 years in management.
• Bachelors degree required; Masters preferred in Information Security, Computer Science, or related field.
• Expert knowledge of NIST CSF, PCI DSS, HIPAA/HITECH.
• Proven leadership and project management skills.
• Proficiency in compliance, audit, and monitoring tools.
• Relevant certifications (e.g., CISM, CISSP, CISA) required.

Responsibilities

• Manage GRC staff, including hiring, training, performance evaluation, and career development.
• Oversee policy and standards creation, ensuring alignment with regulatory requirements and best practices.
• Lead risk assessment activities and track remediation progress.
• Manage compliance audits, producing technical and executive reports.
• Oversee thirddparty risk assessments and ensure vendor compliance.
• Direct enterprise security awareness initiatives and continuous improvement efforts.
• Manage data protection programs to ensure security of sensitive information.
• Lead vulnerability management programs, ensuring timely remediation.
• Oversee email security programs and enforce related controls.
• Coordinate with leadership on GRC strategies, metrics, and priorities.
• Perform other related duties as assigned.

Skills

Cybersecurity GRC

Leadership

Policy & Standards

Risk Assessment

Compliance Audits

Third-Party Risk

Security Awareness

Data Protection

Education

Bachelors Degree

Masters Degree

Tools

Compliance Tools

Audit Tools

Job description

Lurie Childrens Hospital of Chicago seeks an experienced cybersecurity leader to manage the organization’s GRC program, strengthening security posture and ensuring compliance with NIST CSF, PCI DSS, HIPAA and HITECH. Youll lead the GRC team, develop policies, and drive risk assessments and audits across departments.

Requirements include a Bachelors degree, relevant certifications (CISM/CISSP/CISA), and 5–7 years in GRC with 2+ in management.