About the role

What you’ll do

• Lead and mature enterprise security governance, risk management, regulatory compliance, and customer assurance programs
• Oversee compliance frameworks and maintain certification readiness
• Manage security risk and customer assurance initiatives
• Build scalable GRC operations in partnership with cross-functional teams
• Develop GRC program maturity models, executive scorecards, and risk-based reporting frameworks
• Partner with Sales, Customer Success, and stakeholders on customer assurance materials and go-to-market enablement

What you’ll need

• 8+ years in information security, GRC, compliance, or IT audit, including 2+ years leading GRC initiatives, programs, or teams
• Deep working knowledge of HITRUST, ISO 27001, and HIPAA with direct experience managing assessments, controls, audits, and certification readiness
• Demonstrated experience deploying and administering enterprise GRC platforms such as Vanta, Anecdotes, ZenGRC, Drata, or ServiceNow GRC
• Deep understanding of enterprise risk management including risk registers, control assessments, remediation SLAs, and exception management
• Proven experience leading customer assurance programs, security questionnaires, due diligence reviews, and customer security meetings
• Professional certifications such as CISM, CISSP, CRISC, CISA, CGRC, or HITRUST CCSFP

Original job description