Lead Governance, Risk and Compliance Manager

Job not on LinkedIn

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $133k - $145k / year

⏰ Full Time

🟠 Senior

🚔 Compliance

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Cohere Health

WebsiteLinkedInAll Job Openings

201 - 500 employees

🏥 Healthcare

💼 Consulting

📦 Logistics

Healthcare • Consulting • Logistics

Cohere Health is a company focused on transforming the prior authorization process in healthcare using advanced technologies. The company offers the Cohere Unify™ Platform, which includes artificial intelligence and machine learning capabilities to improve utilization management (UM) and facilitate quicker access to patient care. By digitizing the prior authorization process and integrating with electronic medical records, Cohere Health aims to enhance the quality of healthcare outcomes and reduce the administrative burden on providers. Their solutions help decrease denial rates and adverse outcomes through evidence-based intelligence and real-time clinical suggestions. Cohere Health's offerings are available as Platform as a Service (PaaS) or as fully outsourced solutions.

📋 Description

• Lead and mature Cohere’s GRC program by establishing scalable governance processes, operating procedures, risk management practices, and measurable performance indicators • Own deployment, configuration, and optimization of enterprise GRC platforms, including control mapping, evidence automation, risk registers, continuous monitoring, and compliance reporting • Direct compliance and certification initiatives across HITRUST, HIPAA, ISO 27001, and applicable regulatory requirements • Lead customer security assurance activities, including security questionnaires, due diligence requests, customer audits, executive briefings, and security discussions • Partner with Sales, Customer Success, and Marketing on security-focused go-to-market materials and maintain a customer-facing Trust Center • Review and negotiate security-related contractual requirements with Legal, including DPAs, BAAs, security exhibits, and customer security obligations • Oversee enterprise risk management, including risk assessments, remediation tracking, exception management, and vulnerability remediation SLA reporting • Govern identity and access compliance, including access reviews, privileged access certifications, segregation of duties, and remediation of access control deficiencies • Establish cross-functional GRC engagement to align policies, controls, risk ownership, and compliance obligations with operational priorities • Develop executive presentations, dashboards, and reporting on compliance posture, risk exposure, remediation performance, customer assurance metrics, and program maturity • Build and scale a high-performing GRC function, develop team capabilities, manage external assessors and partners, and drive continuous improvement

🎯 Requirements

• 8+ years of progressive experience in information security, governance, risk management, compliance, or IT audit, including 2+ years leading GRC initiatives, programs, and/or teams • Professional certifications such as CISM, CISSP, CRISC, CISA, CGRC, or HITRUST CCSFP • Deep working knowledge of HITRUST, ISO 27001, and HIPAA, including direct experience managing assessments, implementing controls, coordinating audits, and maintaining certification readiness • Demonstrated experience deploying and administering enterprise GRC platforms, including implementation, workflow design, control mapping, evidence collection, reporting, and process automation • Familiarity with the NIST Cybersecurity Framework, NIST AI Risk Management Framework, ISO 27017, ISO 27018, ISO 42001, and privacy-related security requirements • Deep understanding of enterprise risk management, including risk registers, control assessments, risk treatment plans, vulnerability remediation SLAs, and formal exception management • Demonstrated project and program management capabilities, including managing concurrent initiatives, developing operational roadmaps, establishing KPIs, and delivering results independently • Proven experience leading customer assurance programs, including security questionnaires, customer-facing security meetings, due diligence reviews, and responding to enterprise customer requirements • Experience with GRC platforms such as Vanta, Anecdotes, ZenGRC, Drata, ServiceNow GRC, or similar enterprise solutions • Demonstrated success developing GRC program maturity models, executive scorecards, and risk-based reporting frameworks • Excellent written and verbal communication, executive presentation, and analytical reporting skills, with the ability to translate complex security and compliance requirements into actionable business insights • Working knowledge of contractual security requirements, including reviewing and redlining security exhibits, DPAs, BAAs, and customer agreements in collaboration with Legal • Demonstrated ability to partner with Sales, Customer Success, and business stakeholders to develop customer assurance materials, security documentation, and go-to-market enablement resources • Experience designing, launching, or administering a customer-facing Security Trust Center and associated assurance workflows • Background in healthcare technology, SaaS, AI/ML-driven organizations, or other highly regulated environments

🏖️ Benefits

• Fully remote opportunity with about 5% travel • Medical, dental, vision, life, disability insurance, and Employee Assistance Program • 401K retirement plan with company match • Flexible spending and health savings account • Flex Time Off + company holidays • Up to 14 weeks of paid parental leave • Pet insurance • Bonus included in the total benefits package

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume