Manager, Security Governance, Risk & Compliance

IQVIA

. Run Cedar Gate’s security governance, risk, and compliance program, driving planning, execution, and reporting across compliance, audit, risk, and customer assurance workstreams .

Posted 10/22/2026full-timeUnited StatesMid-LevelSenior💰 $90,200 - $225,600 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in security governance, risk management, and compliance, with a strong focus on SOC audits, HITRUST assessments, and third-party risk management. Proven ability to lead risk assessments, manage audit processes, and develop security policies in regulated environments.

Highest-signal resume keywords

Security GovernanceRisk ManagementSOC 1 And SOC 2 AuditsHITRUST CSF AssessmentsThird-Party Risk Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

SOC 1 AuditsSOC 2 AuditsHITRUST AssessmentsIT General ControlsBusiness Impact AnalysisDisaster Recovery PlanningRisk Register ManagementData Protection ControlsCompliance ControlsVendor Security Assessments

Soft Skills

Organizational SkillsProgram ManagementCommunication SkillsDecision-MakingCollaboration

Tools & Technologies

AWSDLPPHI Handling ControlsAudit Management ToolsRisk Management Software

Certifications & Qualifications

CISACISSPCRISCHITRUST CCSFP

Industry Keywords

HealthcareHealth TechnologyRegulated EnvironmentsHIPAAHITECH

Tech Stack

Tools & technologies

AWSCloud

About the role

Key responsibilities & impact

Run Cedar Gate’s security governance, risk, and compliance program, driving planning, execution, and reporting across compliance, audit, risk, and customer assurance workstreams
Administer annual SOC 1 and SOC 2 audits and HITRUST r2 and interim assessments
Coordinate evidence requests, interviews, and walkthroughs between auditors and internal control owners, and drive gap resolution and escalations
Manage audit vendor relationships, including vendor selection, contracts, deliverables, and payment
Oversee recurring compliance controls performed by the Nepal operations team
Oversee data protection controls, including data destruction sample audits, data destruction certificates, and DLP reviews of PHI activity across AWS WorkSpaces users
Support client security reviews, questionnaires, audit communications, SOC 2 NDAs, and SOC report distribution
Mature the enterprise risk program, maintaining the risk register, leading risk assessments, managing risk exceptions, and tracking treatment and remediation plans
Deliver regular risk, control effectiveness, and audit status reporting to Cedar Gate and IQVIA leadership
Lead the annual business impact analysis and maintain business continuity and disaster recovery plans
Develop, review, and update security policies and procedures
Oversee third-party risk management for Tier 1 Cedar Gate vendors
Coordinate same-day responses to significant audit findings, emerging security risks, compliance issues, and customer-driven requests
Align Cedar Gate controls, policies, and evidence processes with IQVIA frameworks and contribute to broader IQVIA governance, risk, and compliance initiatives

Requirements

What you’ll need

5–8 years of experience in security governance, risk and compliance, IT audit, or security compliance roles
Hands-on experience administering SOC 1 and SOC 2 audits, including evidence management, auditor coordination, and control owner walkthroughs
Hands-on experience with HITRUST CSF assessments, ideally including r2 and interim assessments
Experience operating or testing IT general controls, including access reviews, termination and elevated access processes, patch management, backup, and data destruction
Experience building or maturing an enterprise or IT risk management program, including risk registers, interview-based risk assessments, exception processes, and remediation tracking
Experience with business impact analysis, business continuity, and disaster recovery planning
Experience supporting customer assurance activities such as security questionnaires, client audits, and SOC report distribution
Experience with third-party risk management and vendor security assessments
Working knowledge of HIPAA/HITECH requirements and PHI handling controls
Experience overseeing work performed by offshore or distributed teams without direct reporting lines, including quality review, follow-up, and escalation
Familiarity with cloud environments, preferably AWS, and common security controls such as DLP and endpoint protection
Strong organizational and program management skills, with the ability to run a recurring control calendar and multiple concurrent audits against firm deadlines
Ability to work credibly with executives, auditors, clients, and control owners, and to drive decisions on sensitive findings and risk treatment
Experience in healthcare, health technology, or other regulated environments is preferred
Bachelor’s degree in Information Security, Information Systems, Business, or equivalent practical experience is preferred
Relevant certifications such as CISA, CISSP, CRISC, or HITRUST CCSFP are preferred

Benefits

Comp & perks

Health and welfare benefits
Incentive plans, bonuses, and/or other forms of compensation may be offered