Manager, Governance, Risk & Compliance

Job not on LinkedIn

🔥 1 hour ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Rochester Regional Health

WebsiteLinkedInAll Job Openings

10,000+ employees

🏥 Healthcare

⚕️ Healthcare Insurance

📚 Education

Healthcare • Healthcare Insurance • Education

Rochester Regional Health is an integrated health services organization serving the people of Western New York. It operates multiple hospitals and healthcare facilities, providing a wide range of healthcare services, including emergency care, primary care, specialty clinics, and urgent care. The organization is committed to medical education and research, offering training programs, residencies, and clinical trials. Rochester Regional Health focuses on comprehensive care with emphasis on treating patients respectfully and meeting their diverse medical needs across all stages of life.

📋 Description

• Leads the GRC program activities and a team of professionals related to third-party risk, security internal audit, security compliance, and ISMS program management • Develop, document, and implement internal policies and procedures to ensure compliance with industry standards and legal requirements • Facilitate regular risk assessments against security frameworks such as SOC 2, ISO 27001, and PCI-DSS • Manage CAPAs for non-compliance • Define specific, assignable actions to mitigate identified risks or exploit opportunities • Evaluate how to embed planned actions into daily operational processes • Manage security responses to client questions and questionnaires, including RFPs, RFIs, and annual risk reviews • Manage and update business continuity and disaster recovery documentation • Plan, coordinate, and document annual exercises, such as tests and tabletops • Build and manage a security metrics (KPI’s) program • Develop relationships with cross-functional teams to drive risk-informed decision-making

🎯 Requirements

• Minimum of 5 years of experience leading Governance, Risk, and Compliance (GRC) programs • Proficiency in ISO 27001 • GRC certifications (e.g. CGRC, CRISC, etc) preferred • Bachelor's degree in IT, cybersecurity, business, or law preferred • Previous experience in GRC, risk management, or internal audit • Proficiency in frameworks like SOC2, NIST CSF, and HIPAA regulations • Strong ability to analyze risk data and translate complex regulations into actionable controls • Experience with 3rd party/vendor risk management processes • Understanding of GRC processes such as policy management, risk assessment, and IT audits

🏖️ Benefits

• Health insurance • Retirement plans • Paid time off • Flexible work arrangements • Professional development