Senior Manager Of GRC (Cybersecurity)

TL;DR

Senior Manager Of GRC (Cybersecurity): Leading the Governance, Risk, and Compliance function in an AI-first healthcare environment with an accent on automation and regulatory frameworks. Focus on scaling continuous evidence collection, hardening HIPAA/HITRUST/SOC 2 certifications, and enabling commercial velocity.

Location: Remote (US). Not hiring in AK, AR, DE, HI, ME, MS, NM, OK, SD, VT, WI

Salary: $161,500 – $209,000 / year

Company

hirify.global is on a mission to reverse metabolic disease in one billion people through technology, personalized nutrition, and virtual care delivery.

What you will do

• Oversee the GRC function and scale the Vanta platform to automate continuous evidence collection and ensure audit-readiness.
• Partner with Sales and Customer Success to navigate enterprise security evaluations, questionnaires, and RFP processes.
• Own the security policy lifecycle, exception management, vendor risk assessments, and executive risk reporting.
• Optimize ticketing workflows in Zendesk or Jira for access governance and SaaS tool compliance.
• Collaborate with IT and Engineering to map GRC policies to technical architectures and AI governance frameworks (ISO 42001, NIST AI RMF).
• Design and deliver targeted security awareness and compliance training programs.

Requirements

• 7+ years of experience in Cybersecurity GRC, IT Auditing, or Information Security Compliance.
• 2+ years of experience leading programs or managing teams in regulated environments (Healthcare or Digital Health).
• Hands-on experience maintaining HITRUST CSF, HIPAA, and SOC 2 frameworks.
• Proven track record using SaaS GRC automation platforms such as Vanta or Drata.
• Strong client-facing communication skills for complex enterprise security evaluations.
• Must be based in the United States (excluding restricted states).

Culture & Benefits

• People-first culture that emphasizes care for peers and patients equally.
• Strong emphasis on ownership, initiative, and empowering others.
• Evidence-based decision making, prioritizing data and science over dogma.
• Transparent environment with open access to information to promote trust.
• Dynamic culture that encourages taking risks and rapid iteration.