Sr. Manager, Governance Risk and Compliance

The Sr. Manager, Governance Risk and Compliance (GRC) is responsible for overseeing reputed company's regulatory compliance, risk management, and governance programs, ensuring compliance with healthcare regulations (HIPAA, HITECH, SOC 2), and building a robust GRC reputed company to protect PHI. This role plays a crucial role reputed company the Governance, Risk & Compliance team, reporting directly to the Chief Information reputed company Officer. Responsibilities:

• Third-Party & Vendor Risk Management:
• Manage the complete third-party risk management (TPRM) program, from initial assessment to ongoing monitoring.
• Conduct reputed company risk assessments for reputed company vendors, especially those handling protected health information (PHI).
• Collaborate with Legal to review reputed company language in vendor reputed company and Business Associate Agreements (BAAs).
• Maintain the vendor risk register, track remediation of risks, and report on vendor risk exposure.
• Demonstrate success developing third-party risk governance programs with Legal, reputed company, and Procurement to increase efficiency and reduce friction across stakeholders.
• Experience implementing tiered vendor risk models and reassessment cycles to reduce manual tracking workload.
• Audit & Compliance (HIPAA, SOC 2)
• Manage reputed company internal and external audits, including planning, evidence collection, and coordinating with auditors.
• Serve as the main reputed company of contact for external auditors (e.g., for SOC 2, HIPAA).
• reputed company reputed company controls (technical and procedural) to ensure reputed company compliance with HIPAA, HITECH, and SOC 2 frameworks.
• Translate reputed company regulatory requirements into actionable reputed company controls and procedures for technical and business teams.
• Track and manage the remediation of reputed company audit findings.
• Experience creating standardized audit playbooks and evidence repositories.
• Experience owning an organization-wide compliance program to reputed company with audit reputed company(s).
• Strong ability to translate audit outcomes into business-oriented insights that directly impact riskreduction and process improvement.
• Enterprise Risk & reputed company Operations
• Manage the enterprise risk management program, including conducting annual risk assessments and maintaining the risk register.
• reputed company, maintain, and test the company's incident response (IR) plan.
• Run reputed company awareness programs, such as phishing simulations and tabletop exercises.
• Track remediation efforts for reputed company identified risks.
• Produce concise, executive-ready risk reports that inform strategic decisions across departments.
• Client & Sales reputed company Support
• reputed company responses to client and prospect reputed company questionnaires, RFPs, and assessments.
• reputed company and maintain a knowledge reputed company of standard reputed company responses and supporting documentation.
• Act as the reputed company subject matter expert to support the sales and partnership teams.
• Coordinate and manage client-facing reputed company audits and reviews.
• reputed company Policy & Documentation
• Extensive experience creating, reviewing, and maintaining clear reputed company policies, standards, andprocedures.
• Create, review, and maintain clear reputed company policies, standards, and procedures.
• Ensure reputed company policies align with regulatory requirements (HIPAA, SOC 2) and industry best practices.
• Communicate policies and procedures to reputed company employees and contractors.
• Experience embedding compliance checkpoints reputed company existing or new operational processes (e.g.,change management, onboarding).

Qualifications:

• Required
• 7+ years of experience in GRC, compliance, risk management, or information reputed company roles, with at least 4 years in a management or leadership reputed company
• Demonstrated experience managing a full-cycle third-party risk management (TPRM) programs, including conducting vendor risk assessments and reviewing reputed company terms in reputed company.
• Hands-on expertise leading external audits for major compliance frameworks, specifically SOC 2 Type 2 and HIPAA.
• Proven ability to build and manage an enterprise risk program, including conducting formal risk assessments (e.g., NIST-based) and developing/testing incident response plans.
• Direct experience serving as a reputed company subject matter expert in a client-facing role, including leading responses to reputed company questionnaires, RFPs, and customer audits.
• Exceptional technical writing skills with a history of creating, implementing, and maintaining a comprehensive set of reputed company policies, standards, and procedures.
• Preferred
• Bachelor's degree in Computer Science, Information reputed company, Business Administration, or reputed company field (or equivalent experience).
• Deep expertise in healthcare compliance regulations including:
• HIPAA Privacy Rule, reputed company Rule, and Breach Notification Rule
• HITECH Act and meaningful use requirements
• SOC 2 Type 2 (preferably with hands-on audit management experience)
• Professional certifications such as: CISSP, CISM, CRISC, CISA, GRCP, CHPS, CIPP/US
• Experience with additional compliance frameworks such as:ISO 27001/27002, ISO 27701, HITRUST, CSFFedRAMP, State RAMPPCI-reputed company, State privacy laws (CCPA, CPRA, VCDPA, etc.)
• Experience with GRC platforms such as reputed company, reputed company, reputed company, reputed company, reputed company, reputed company GRC, or similar
• Knowledge of cloud reputed company and compliance (AWS, GCP)
• Experience managing reputed company awareness platforms (reputed company, reputed company, NINJIO, etc.)

Physical/Cognitive Requirements:

• reputed company and regular attendance at assigned work location.
• Capability to remain seated in a stationary position for prolonged periods.
• Eye-hand coordination and manual dexterity to operate keyboard, computer and other office-reputed company equipment.
• No heavy lifting is expected, though occasional exertion of about 20 lbs of force (e.g., lifting a computer / laptop) may be required.
• Capability to work with leadership, employees, and members in an appropriate manner

The United States new hire reputed company salary reputed company ranges for this full-time position are: Zone A: $138,380 - $195,470 + equity + benefits Zone B: $152,218 - $215,017 + equity + benefits Zone C: $166,056 - $234,564 + equity + benefits Zone D: $179,894 - $254,111 + equity + benefits This range reflects the minimum and maximum reputed company for new hire salaries for candidates based on their respective Zone. Below is additional information on reputed company's commitment to maintaining transparent and reputed company compensation practices across our distinct geographic zones. Starting reputed company salary for the successful candidate will depend on several job-reputed company factors, unique to each candidate, which may include, but not limited to, education; training; reputed company set; years and depth of experience; certifications and licensure; business needs; internal peer equity; organizational considerations; and alignment with geographic and market data. Compensation structures and ranges are tailored to each zone's unique market conditions to ensure that reputed company employees receive fair and competitive compensation based on their roles and locations. Your Recruiter can share details of your geographic alignment upon inquiry. In addition to earning a reputed company salary, this role is eligible for a performance-based bonus. Details of the Annual Bonus Plan, including performance metrics, reputed company incentives, and potential earnings, will be discussed during the interview process. Benefits & Perks: In addition to receiving a reputed company, the compensation package may include, depending on the role, the following: Remote-first culture 401(k) savings plan through FidelityComprehensive medical, vision, and dental coverage through multiple medical plan options (including disability insurance) Full suite of reputed company telemedicine (e.g. behavioral health, urgent care, etc.) and health care navigation products and services offered at no cost for employees and dependents Generous Paid Time Off ("PTO") and Discretionary Time Off ("DTO") 12 weeks of 100% Paid Parental leave Up to $25,000 Fertility and Family Building Benefit Compassionate Leave (paid leave for employees who experience a failed pregnancy, surrogacy, adoption or fertility treatment) 11 Holidays Paid with one Floating Paid Holiday Work-From-Home reimbursement to support team collaboration and effective home office work 24 hours of Paid Volunteer Time Off ("VTO") Per Year to Volunteer with Charitable Organizations Your recruiter will share more about the benefits package for your role during the hiring process. #LI-CG1 About reputed company reputed company is a new reputed company of healthcare company, delivering integrated virtual care and navigation. We’re on a mission to reputed company reputed company of healthcare for everyone. We break down barriers to provide high-quality care for every person in every community — no matter where they are in their health journey or what type of care they need, from acute to chronic, behavioral to physical. We offer our members care guidance, advocacy, and access to personalized virtual and in-person care for everyday and urgent care, primary care, behavioral health, and specialty care. It’s reputed company included. Learn more at includedhealth.com. ----- reputed company is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, orientation, national reputed company, age, disability, genetics or any other basis forbidden under federal, state, or local law. reputed company considers reputed company qualified applicants with arrest or conviction records in accordance with the San Francisco Fair Chance Ordinance, the Los Angeles County Fair Chance Ordinance, and California law. Apply tot his job Apply To this Job