Lead Governance, Risk and Compliance Manager

The role

The Lead GRC Manager will lead and mature enterprise security governance, risk management, regulatory compliance, and customer assurance programs. This role involves driving operational excellence across compliance frameworks and strengthening security processes to support business growth.

What you will do

• Lead and mature the GRC program and establish scalable governance processes.
• Own the deployment, configuration, and optimization of enterprise GRC platforms.
• Direct compliance and certification initiatives across HITRUST, HIPAA, and ISO 27001.
• Lead customer security assurance activities including questionnaires and audits.
• Partner with Sales, Customer Success, and Marketing to develop security-focused go-to-market materials.
• Review and negotiate security-related contractual requirements with Legal.
• Oversee enterprise risk management activities and remediation tracking.
• Govern identity and access compliance including periodic access reviews.
• Establish and maintain cross-functional GRC engagement with business units.
• Develop and deliver executive-level presentations and reporting.

Required qualifications

• 8+ years of progressive experience in information security, governance, risk management, compliance, or IT audit.
• 2+ years leading GRC initiatives, programs, and/or teams.
• Professional certifications such as CISM, CISSP, CRISC, CISA, CGRC, or HITRUST CCSFP.
• Deep working knowledge of HITRUST, ISO 27001, and HIPAA.
• Experience deploying and administering enterprise GRC platforms.
• Familiarity with the NIST Cybersecurity Framework, NIST AI Risk Management Framework, ISO 27017, ISO 27018, and ISO 42001.
• Deep understanding of enterprise risk management.
• Demonstrated project and program management capabilities.
• Proven experience leading customer assurance programs.
• Experience with GRC platforms such as Vanta, Anecdotes, ZenGRC, Drata, or ServiceNow GRC.
• Demonstrated success developing GRC program maturity models and risk-based reporting frameworks.
• Excellent written and verbal communication, executive presentation, and analytical reporting skills.

Nice to have

• Experience designing, launching, or administering a customer-facing Security Trust Center.
• Background in healthcare technology, SaaS, AI/ML-driven organizations, or other highly regulated environments.

Benefits

• Medical, dental, vision, life, disability, and Employee Assistance Program
• 401K retirement plan with company match
• Flexible spending and health savings account
• Flex Time Off
• Company holidays
• Up to 14 weeks of paid parental leave
• Pet insurance

Before you apply

• Preliminary Phone Screening
• Meet your Hiring Manager
• Case Study
• Cross functional interview

About the company

Cohere Health’s clinical intelligence platform and agentic AI-powered solutions connect health plans’ strategic goals and providers’ needs. The company improves collaboration and reduces burden, resulting in up to 8x ROI and 94% provider satisfaction.