Security GRC Manager (AI Governance)

Location: Remote

Salary: $144,000–$175,000 annually, depending on geographic location, experience, and qualifications.

Company

hirify.global is a healthcare technology company that helps patients find appropriate care and medications through a mobile app, clinicians, pharmacists, and on-demand health guides.

What you will do

• Lead and mentor a small GRC team while setting priorities, reviewing work, and growing the function.
• Own the unified control library and maintain mappings across SOC 1, SOC 2, and HITRUST CSF.
• Lead audit preparation, evidence production, control monitoring, and remediation in partnership with Engineering, IT, People, Finance, and other stakeholders.
• Support data privacy and protection programs covering HIPAA/HITECH, BAAs, privacy impact assessments, incident analysis, and data handling.
• Own the AI governance program, including AI risk assessments, the risk register, Statement of Applicability, customer questionnaires, and alignment with ISO/IEC 42001 and emerging requirements.
• Lead contract security and privacy reviews, business continuity planning, third-party risk management, security risk management, training, and customer assurance activities.

Requirements

• 5–10 years of related experience and a relevant certification such as CISSP, CISA, or CISM.
• Personal experience leading SOC 2 and HITRUST CSF certification in a high-growth environment.
• Experience with AI governance frameworks such as ISO/IEC 42001 and AI systems processing sensitive data.
• Strong understanding of risk assessment methodology, HIPAA, HITECH, covered entity and business associate obligations, BAAs, and breach risk assessments.
• Intermediate to advanced understanding of SDLC, IT and security tooling, and controls involving AWS, Okta, Jira, Git/GitHub, Jamf, CrowdStrike, Wiz, and Drata.
• Ability to perform qualitative and quantitative risk assessments and lead or mentor GRC analysts.

Nice to have

• Experience with joint SOC 2/HITRUST attestations.
• A combination of deep technical and compliance expertise.

Culture & Benefits

• Remote work arrangement.
• Mission focused on improving healthcare access, outcomes, and affordability.
• Values include being human first, redefining what is possible, debating then committing, cultivating grit, and seeking to delight.
• Inclusive workplace committed to equal employment opportunity and diverse perspectives.