Senior Manager, GRC

For our client, we are seeking a Senior Manager, GRC to join the team of a leader in the Hospitals & Medical Centers space.

This role will lead governance, risk, and compliance efforts across a healthcare environment with a strong emphasis on security assurance and audit readiness. You will own key certification programs, coordinate cross-functional remediation efforts, and help ensure controls, policies, and processes keep pace with changing regulatory and customer requirements. The position also serves as a critical partner to Security, IT, Legal, Sales, and Customer Success teams.

Location: Remote - US based candidates only, no visa sponsorship available

Compensation: $170,000 – $201,000 annually

Responsibilities

• Own SOC 2 and HITRUST certification processes, coordinating audits and remediations
• Establish and lead new ISO 27001 and ISO 42001 certification efforts
• Manage the audit calendar, ensuring timely evidence gathering and finding closures across teams
• Track regulatory changes and implement necessary control updates
• Serve as the owner of security questionnaires and RFIs for Sales and Customer Success
• Maintain a security knowledge base to streamline responses
• Build and oversee an internal audit and control monitoring program

Qualifications

• 6+ years in GRC, information security compliance, or IT audit experience with ownership of a SOC 2 audit cycle
• Hands-on knowledge of SOC 2, HITRUST, and ISO 27001 frameworks
• Experience responding to customer security questionnaires and RFIs in a B2B SaaS or healthcare environment
• Strong collaboration skills across Engineering, IT, HR, Legal, and Sales teams
• Solid project management abilities to handle overlapping audits and certification projects
• Excellent written communication for drafting policies and audit narratives

Benefits

• Access to platform specialists for mental and reproductive health, family planning, and pediatrics
• Wellness partnerships for whole-self care
• Hybrid work model with in-office meals and collaboration days
• 16 weeks of paid parental leave and new parent stipends after one year of service
• Annual professional development stipend and personal career coaching access
• 401K matching for US employees with immediate vesting

Our client is an equal opportunity employer. We encourage you to apply even if you don’t meet every qualification—your background could be exactly what this team needs.