Compliance

• Oversee WELLSTAR’s ISO 27001 ISMS and SOC 2 Type 2 control framework, ensuring readiness for audits, collecting evidence, and tracking remediation
• Establish and continuously improve policies, processes, and GRC practices
• Own compliance onboarding process for newly acquired entities, designing and executing 12-month roadmaps
• Perform gap analyses, risk assessments, and maturity evaluations, and define remediation plans with business unit leaders
• Maintain the GRC risk register, coordinate internal control testing, and support third-party risk reviews
• Track and present GRC KPIs and compliance metrics to leadership, creating dashboards
• Support awareness campaigns, facilitate employee training, and foster a culture of compliance
• Monitor changes in regulatory requirements and industry trends
• Report directly to the Business Information Security Officer and partner with leaders across nine companies

GRC Lead

IT Governance, Risk & Compliance Specialist

Compliance Officer – Testing

Compliance Business Partner Support

Compliance Officer

Senior Manager – Operations Regulatory Risk