Lead Governance, Risk and Compliance Manager (Healthcare AI)

Location: United States; fully remote with approximately 5% travel

Salary: $133,000–$145,000 annually, plus benefits and bonus

Company

hirify.global develops a clinical intelligence platform and agentic AI-powered healthcare solutions that connect health plans and providers, supporting authorization, payment accuracy, claims validation, and care quality.

What you will do

• Lead and mature the enterprise GRC program, including governance processes, risk management practices, operating procedures, KPIs, and maturity models.
• Deploy, configure, and optimize enterprise GRC platforms covering control mapping, evidence automation, risk registers, continuous monitoring, and compliance reporting.
• Direct HITRUST, HIPAA, ISO 27001, and regulatory compliance initiatives, including assessments, audits, control execution, and certification readiness.
• Lead customer security assurance through questionnaires, due diligence, audits, executive briefings, Trust Center operations, and security discussions.
• Partner with Legal, Sales, Customer Success, Marketing, Engineering, IT, and executives on contracts, customer assurance materials, risk remediation, and security enablement.
• Build and scale the GRC function, oversee access compliance and vulnerability remediation SLAs, manage assessors and partners, and deliver executive dashboards and reporting.

Requirements

• 8+ years of progressive experience in information security, governance, risk management, compliance, or IT audit, including 2+ years leading GRC initiatives, programs, and/or teams.
• Professional certification such as CISM, CISSP, CRISC, CISA, CGRC, or HITRUST CCSFP.
• Deep working knowledge of HITRUST, ISO 27001, and HIPAA, with direct experience managing assessments, implementing controls, coordinating audits, and maintaining certification readiness.
• Experience deploying and administering enterprise GRC platforms, including implementation, workflow design, control mapping, evidence collection, reporting, and process automation.
• Familiarity with the NIST Cybersecurity Framework, NIST AI Risk Management Framework, ISO 27017, ISO 27018, ISO 42001, and privacy-related security requirements.
• Strong understanding of enterprise risk management, including risk registers, control assessments, risk treatment plans, vulnerability remediation SLAs, and formal exception management.
• Project and program management experience, including concurrent initiatives, operational roadmaps, KPIs, and independent delivery.
• Experience leading customer assurance programs and responding to enterprise customer security requirements.
• Excellent written and verbal communication, executive presentation, analytical reporting, and ability to translate security and compliance requirements into business insights.
• Working knowledge of contractual security requirements, including security exhibits, DPAs, BAAs, and customer agreements in collaboration with Legal.
• Experience partnering with Sales, Customer Success, and business stakeholders on customer assurance materials, security documentation, and go-to-market enablement.
• Experience designing, launching, or administering a customer-facing Security Trust Center and related assurance workflows.
• Background in healthcare technology, SaaS, AI/ML-driven organizations, or other highly regulated environments.

Nice to have

• Experience with Vanta, Anecdotes, ZenGRC, Drata, ServiceNow GRC, or similar enterprise GRC platforms.

Culture & Benefits

• Fully remote work with approximately 5% travel.
• Medical, dental, vision, life, disability insurance, Employee Assistance Program, flexible spending account, and health savings account.
• 401(k) retirement plan with company match.
• Flex Time Off and company holidays.
• Up to 14 weeks of paid parental leave and pet insurance.
• Collaborative, empathetic, candid, inclusive, and growth-oriented environment.

Hiring process

• Preliminary phone screening with Talent Acquisition.
• Interview with the Hiring Manager, followed by a case study.
• Cross-functional interview.