Strategic InfoSec Risk & Governance Lead

Blue Shield of California; California; On-site; USD 123,000 - 185,000; Full time

Job summary

Stellarus is seeking an Information Security Risk and Governance Specialist to translate regulatory and policy requirements into sustainable governance and controls. This role supports the Compliance function and drives IT audit-readiness across SOC 2, NIST, HIPAA, HITRUST, and related frameworks.

The candidate will manage GRC processes, dashboards, and evidence repositories while collaborating with technology teams to embed security governance in the lifecycle and ensure effective risk

Qualifications

• Requires bachelor’s degree or equivalent experience.
• 7+ years of relevant experience in security governance, risk, and compliance.
• Understanding of security assurance frameworks including NIST, HIPAA, SOC 2.

Responsibilities

• Maintain GRC information in systems, risk registers, and assurance trackers.
• Develop dashboards and reporting on security risks and control performance.
• Coordinate evidence for audits, regulatory reviews, and certifications.
• Support maturity and readiness activities for SOC 2, HIPAA, HITRUST, NIST.

Skills

GRC

Risk management

Audit coordination

Regulatory knowledge

Stakeholder communication

Documentation skills

Project management

Security controls

Education

Bachelor's degree or equivalent

Tools

GRC platforms

Job description

Stellarus is seeking an Information Security Risk and Governance Specialist to translate regulatory and policy requirements into sustainable governance and controls. This role supports the Compliance function and drives IT audit-readiness across SOC 2, NIST, HIPAA, HITRUST, and related frameworks.

The candidate will manage GRC processes, dashboards, and evidence repositories while collaborating with technology teams to embed security governance in the lifecycle and ensure effective risk