Executive Director, Governance Risk & Compliance

About the role

HCSC is looking for an Executive Director, Governance Risk & Compliance to provide enterprise leadership for security risk and compliance. The role sets strategy, owns GRC outcomes and ensures regulatory alignment across the company and its subsidiaries, building and sustaining the enterprise GRC framework. It leads all enterprise attestations and certifications, including SOX, HIPAA and HITRUST, with clear reporting to the C-suite and the Board.

Key responsibilities

• Govern security policy, exceptions, security awareness initiatives and third-party risk management
• Enable consistent identification, tracking, remediation and reporting of security risks across the enterprise
• Oversee threat and vulnerability management processes and ensure adherence to risk policies and standards
• Own the enterprise information security risk posture and budget stewardship
• Drive cross-functional alignment with Legal, Compliance, IT and business stakeholders

Required profile

• Bachelor's degree and 15 years of experience in IT/information security, or 19 years without a degree
• Minimum 7 years of people leadership experience (multi-team leadership preferred)
• Proven experience leading enterprise GRC programs covering risk, compliance, policy, third-party risk and subsidiary governance
• Demonstrated success briefing executives and the Board, owning budgets and driving cross-functional outcomes

Required skills

• Enterprise GRC programs
• Preferred: regulatory regimes such as HIPAA/HITRUST and SOX, and frameworks such as NIST CSF/800-53, ISO 27001

What we offer

• Base pay range of $177,500 to $329,800, varying with skills, experience and location
• Annual incentive bonus plan subject to its terms and conditions
• Benefits including health and wellness, 401(k), pension, paid time off, paid parental leave, disability insurance, tuition reimbursement and more