Senior Manager, Governance, Risk, and Compliance

Team: Legal

Location: US

Commitment: Full-time

Workplace Type: remote

Accountabilities:

The Senior Manager, Governance, Risk, and Compliance will own and enhance security governance programs while enabling efficient business operations through scalable compliance practices. The role requires strong collaboration across technical and business teams to improve risk visibility, audit readiness, and security maturity.

• Lead and mature the Governance, Risk, and Compliance program, including security policies, procedures, controls, and compliance frameworks aligned with industry standards and regulatory requirements.
• Manage and optimize automated compliance operations using modern GRC platforms to support continuous evidence collection, audit preparation, and certification readiness.
• Maintain and strengthen compliance programs across frameworks such as HIPAA, HITRUST, and SOC 2 while identifying opportunities for improvement.
• Partner with commercial teams to support enterprise security evaluations, customer questionnaires, RFP processes, and external security reviews.
• Own security risk management processes, including risk assessments, exception management, vendor evaluations, and executive reporting.
• Design efficient workflows for employee security requests, SaaS reviews, access governance, and compliance-related processes.
• Collaborate with security engineering, IT, and product teams to ensure governance requirements align with technical architecture and emerging AI governance standards.
• Develop and deliver security awareness initiatives that strengthen employee understanding of compliance, privacy, and risk management responsibilities.
• Build AI-enabled workflows and automation solutions that reduce operational friction and improve compliance efficiency.

Requirements:

The ideal candidate is an experienced security compliance leader with a strong background in GRC, risk management, and regulated environments. They should be comfortable balancing security requirements with business needs while influencing stakeholders across the organization.

• 7+ years of experience in cybersecurity GRC, information security compliance, IT auditing, or related disciplines.
• 2+ years of experience leading security compliance programs, teams, or initiatives within regulated industries such as healthcare or digital health.
• Hands-on experience managing security frameworks including HITRUST CSF, HIPAA, and SOC 2.
• Proven experience implementing and scaling compliance automation platforms such as Vanta, Drata, or similar solutions.
• Strong understanding of security governance, risk assessments, policy management, audit processes, and compliance operations.
• Experience supporting enterprise security reviews, customer questionnaires, RFPs, and external stakeholder engagements.
• Demonstrated ability to create AI-enabled workflows and automation strategies that improve operational efficiency.
• Strong communication and collaboration skills, with the ability to influence technical and non-technical audiences.
• Ability to operate independently in ambiguous environments while making practical, risk-based decisions.
• Experience with AI governance frameworks, security automation, or emerging compliance methodologies is a plus.

Benefits:

• Competitive compensation range of $161,500 - $209,000 per year, based on experience, qualifications, and location.
• Remote-first work environment with flexibility to work from various locations across the United States.
• Comprehensive benefits package designed to support employee health and well-being.
• Opportunities to work on meaningful healthcare technology initiatives with large-scale impact.
• Professional growth opportunities within a fast-paced, innovative environment.
• Exposure to advanced security, compliance automation, and AI-driven operational practices.
• Collaborative culture focused on ownership, transparency, learning, and continuous improvement.
• Supportive workplace environment that values diversity, trust, and employee empowerment.