Lead Governance, Risk and Compliance Manager

Cohere Health

. Lead and mature Cohere’s GRC program by establishing scalable governance processes, operating procedures, risk management practices, and measurable performance indicators .

Posted 11/4/2026full-timeRemote • United StatesSenior💰 $133,000 - $145,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in Governance, Risk Management, and Compliance (GRC) program leadership, including deployment and optimization of enterprise GRC platforms, compliance with regulatory standards such as HITRUST and HIPAA, and effective communication of security and compliance metrics to stakeholders.

Highest-signal resume keywords

GRC Program LeadershipHITRUST ComplianceEnterprise Risk ManagementGRC Platform DeploymentProject Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Governance ProcessesRisk Management PracticesControl MappingEvidence AutomationCompliance ReportingRisk AssessmentsVulnerability RemediationSecurity QuestionnairesExecutive PresentationsAnalytical Reporting

Soft Skills

Excellent CommunicationTeam LeadershipCollaborationNegotiation SkillsAnalytical Thinking

Tools & Technologies

VantaZenGRCDrataServiceNow GRCAnecdotes

Certifications & Qualifications

CISMCISSPCRISCCISACGRCHITRUST CCSFP

Industry Keywords

HIPAAISO 27001NIST Cybersecurity FrameworkHealthcare TechnologySaaSAI/ML-driven Organizations

Tech Stack

Tools & technologies

Cyber SecurityServiceNow

About the role

Key responsibilities & impact

Lead and mature Cohere’s GRC program by establishing scalable governance processes, operating procedures, risk management practices, and measurable performance indicators
Own deployment, configuration, and optimization of enterprise GRC platforms, including control mapping, evidence automation, risk registers, continuous monitoring, and compliance reporting
Direct compliance and certification initiatives across HITRUST, HIPAA, ISO 27001, and applicable regulatory requirements
Lead customer security assurance activities, including security questionnaires, due diligence requests, customer audits, executive briefings, and security discussions
Partner with Sales, Customer Success, and Marketing on security-focused go-to-market materials and maintain a customer-facing Trust Center
Review and negotiate security-related contractual requirements with Legal, including DPAs, BAAs, security exhibits, and customer security obligations
Oversee enterprise risk management, including risk assessments, remediation tracking, exception management, and vulnerability remediation SLA reporting
Govern identity and access compliance, including access reviews, privileged access certifications, segregation of duties, and remediation of access control deficiencies
Establish cross-functional GRC engagement to align policies, controls, risk ownership, and compliance obligations with operational priorities
Develop executive presentations, dashboards, and reporting on compliance posture, risk exposure, remediation performance, customer assurance metrics, and program maturity
Build and scale a high-performing GRC function, develop team capabilities, manage external assessors and partners, and drive continuous improvement

Requirements

What you’ll need

8+ years of progressive experience in information security, governance, risk management, compliance, or IT audit, including 2+ years leading GRC initiatives, programs, and/or teams
Professional certifications such as CISM, CISSP, CRISC, CISA, CGRC, or HITRUST CCSFP
Deep working knowledge of HITRUST, ISO 27001, and HIPAA, including direct experience managing assessments, implementing controls, coordinating audits, and maintaining certification readiness
Demonstrated experience deploying and administering enterprise GRC platforms, including implementation, workflow design, control mapping, evidence collection, reporting, and process automation
Familiarity with the NIST Cybersecurity Framework, NIST AI Risk Management Framework, ISO 27017, ISO 27018, ISO 42001, and privacy-related security requirements
Deep understanding of enterprise risk management, including risk registers, control assessments, risk treatment plans, vulnerability remediation SLAs, and formal exception management
Demonstrated project and program management capabilities, including managing concurrent initiatives, developing operational roadmaps, establishing KPIs, and delivering results independently
Proven experience leading customer assurance programs, including security questionnaires, customer-facing security meetings, due diligence reviews, and responding to enterprise customer requirements
Experience with GRC platforms such as Vanta, Anecdotes, ZenGRC, Drata, ServiceNow GRC, or similar enterprise solutions
Demonstrated success developing GRC program maturity models, executive scorecards, and risk-based reporting frameworks
Excellent written and verbal communication, executive presentation, and analytical reporting skills, with the ability to translate complex security and compliance requirements into actionable business insights
Working knowledge of contractual security requirements, including reviewing and redlining security exhibits, DPAs, BAAs, and customer agreements in collaboration with Legal
Demonstrated ability to partner with Sales, Customer Success, and business stakeholders to develop customer assurance materials, security documentation, and go-to-market enablement resources
Experience designing, launching, or administering a customer-facing Security Trust Center and associated assurance workflows
Background in healthcare technology, SaaS, AI/ML-driven organizations, or other highly regulated environments

Benefits

Comp & perks

Fully remote opportunity with about 5% travel
Medical, dental, vision, life, disability insurance, and Employee Assistance Program
401K retirement plan with company match
Flexible spending and health savings account
Flex Time Off + company holidays
Up to 14 weeks of paid parental leave
Pet insurance
Bonus included in the total benefits package