Lead Governance, Risk and Compliance Manager

Vaga não está no LinkedIn

🕒 6 dias atrás

🇺🇸 Estados Unidos – Remoto (EUA)

💵 $133.000 - $145.000 / ano

⏰ Tempo Integral

🟠 Sênior

🚔 Conformidade

🦅 Patrocina Visto H1B

Esta empresa já patrocinou vistos H1B no passado.

👻 Score fantasma 0%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Por que essa pontuação:

• Aberta há 6 dias.
• As vagas desta empresa costumam ser preenchidas em 21 dias.

Candidatar-se

Encontrar Vagas Remotas Similares

Cohere Health

SiteLinkedInTodas as Vagas

201 - 500 funcionários

🏥 Saúde

💼 Consultoria

📦 Logística

Healthcare • Consulting • Logistics

A Cohere Health é uma empresa focada em transformar o processo de autorização prévia na área da saúde, utilizando tecnologias avançadas. A empresa oferece a Plataforma Cohere Unify™, que inclui capacidades de inteligência artificial e aprendizado de máquina para melhorar a gestão de utilização (UM) e facilitar o acesso mais rápido ao atendimento ao paciente. Ao digitalizar o processo de autorização prévia e integrar-se com registros médicos eletrônicos, a Cohere Health visa melhorar a qualidade dos resultados de saúde e reduzir o fardo administrativo sobre os provedores. Suas soluções ajudam a diminuir as taxas de negação e os resultados adversos por meio de inteligência baseada em evidências e sugestões clínicas em tempo real. As ofertas da Cohere Health estão disponíveis como Plataforma como Serviço (PaaS) ou como soluções totalmente terceirizadas.

Descrição

• Lead and mature Cohere’s GRC program by establishing scalable governance processes, operating procedures, risk management practices, and measurable performance indicators • Own deployment, configuration, and optimization of enterprise GRC platforms, including control mapping, evidence automation, risk registers, continuous monitoring, and compliance reporting • Direct compliance and certification initiatives across HITRUST, HIPAA, ISO 27001, and applicable regulatory requirements • Lead customer security assurance activities, including security questionnaires, due diligence requests, customer audits, executive briefings, and security discussions • Partner with Sales, Customer Success, and Marketing on security-focused go-to-market materials and maintain a customer-facing Trust Center • Review and negotiate security-related contractual requirements with Legal, including DPAs, BAAs, security exhibits, and customer security obligations • Oversee enterprise risk management, including risk assessments, remediation tracking, exception management, and vulnerability remediation SLA reporting • Govern identity and access compliance, including access reviews, privileged access certifications, segregation of duties, and remediation of access control deficiencies • Establish cross-functional GRC engagement to align policies, controls, risk ownership, and compliance obligations with operational priorities • Develop executive presentations, dashboards, and reporting on compliance posture, risk exposure, remediation performance, customer assurance metrics, and program maturity • Build and scale a high-performing GRC function, develop team capabilities, manage external assessors and partners, and drive continuous improvement

🎯 Requisitos

• 8+ years of progressive experience in information security, governance, risk management, compliance, or IT audit, including 2+ years leading GRC initiatives, programs, and/or teams • Professional certifications such as CISM, CISSP, CRISC, CISA, CGRC, or HITRUST CCSFP • Deep working knowledge of HITRUST, ISO 27001, and HIPAA, including direct experience managing assessments, implementing controls, coordinating audits, and maintaining certification readiness • Demonstrated experience deploying and administering enterprise GRC platforms, including implementation, workflow design, control mapping, evidence collection, reporting, and process automation • Familiarity with the NIST Cybersecurity Framework, NIST AI Risk Management Framework, ISO 27017, ISO 27018, ISO 42001, and privacy-related security requirements • Deep understanding of enterprise risk management, including risk registers, control assessments, risk treatment plans, vulnerability remediation SLAs, and formal exception management • Demonstrated project and program management capabilities, including managing concurrent initiatives, developing operational roadmaps, establishing KPIs, and delivering results independently • Proven experience leading customer assurance programs, including security questionnaires, customer-facing security meetings, due diligence reviews, and responding to enterprise customer requirements • Experience with GRC platforms such as Vanta, Anecdotes, ZenGRC, Drata, ServiceNow GRC, or similar enterprise solutions • Demonstrated success developing GRC program maturity models, executive scorecards, and risk-based reporting frameworks • Excellent written and verbal communication, executive presentation, and analytical reporting skills, with the ability to translate complex security and compliance requirements into actionable business insights • Working knowledge of contractual security requirements, including reviewing and redlining security exhibits, DPAs, BAAs, and customer agreements in collaboration with Legal • Demonstrated ability to partner with Sales, Customer Success, and business stakeholders to develop customer assurance materials, security documentation, and go-to-market enablement resources • Experience designing, launching, or administering a customer-facing Security Trust Center and associated assurance workflows • Background in healthcare technology, SaaS, AI/ML-driven organizations, or other highly regulated environments

🏖️ Benefícios

• Fully remote opportunity with about 5% travel • Medical, dental, vision, life, disability insurance, and Employee Assistance Program • 401K retirement plan with company match • Flexible spending and health savings account • Flex Time Off + company holidays • Up to 14 weeks of paid parental leave • Pet insurance • Bonus included in the total benefits package

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo