Data Dimensions

Compliance

• Reporting to the Chief Information Security Officer, this position is responsible for developing, implementing, and managing the organization’s governance, risk, and compliance programs.
• Ensure adherence to regulatory and industry standards, including SOC 2 and HITRUST.
• Oversee the enterprise cyber risk management framework.
• Lead and maintain SOC 2 and HITRUST certification programs, including readiness assessments, gap analysis, remediation planning, and audit coordination.
• Develop and maintain policies, procedures, and controls to meet compliance requirements.
• Serve as the primary liaison with external auditors and certification bodies.
• Design and implement a comprehensive cyber risk management program aligned with industry best practices and regulatory requirements.
• Conduct risk assessments, identify vulnerabilities, and recommend mitigation strategies.
• Maintain risk registers and provide regular reporting to executive leadership.
• Establish and enforce governance frameworks for information security and compliance.
• Ensure alignment of GRC activities with organizational objectives and regulatory obligations.
• Monitor emerging regulations and standards, advising leadership on potential impacts.
• Consult with the Chief Information Security Officer in support of senior management to ensure that security activities are taking place on an appropriate and ongoing basis.
• Collaborate with IT, Security, Legal, and Business teams to ensure compliance and risk management objectives are met.
• Provide training and awareness programs to promote compliance and risk-conscious behavior across the organization.

Director of Governance, Risk & Compliance