About Rightway Healthcare
Discover how Rightway. Backed by Khosla.
About the role
Join Rightway as a Security GRC Manager, a role that owns and matures our GRC function. You will enhance our policies and procedures, streamline workflows, mature our risk management program, own our integrated SOC 2 + HITRUST attestation as we scale, and lead the GRC team. Found on 1752vc Careers, the job board for startup and VC roles.
What they're looking for
- 5-10 years of related work experience
- Maintains a certification relevant to the role (e.g, CISSP, CISA, CISM)
- Personally led SOC2 with HITRUST CSF certification in a high growth environment and understands how to mature controls consistent with organizational maturity and capacity
- Familiarity with AI governance frameworks (e.g., ISO/IEC 42001) and the risk considerations of AI systems that process sensitive data
- Experience leading or mentoring GRC analysts, with the ability to set priorities, review work, and grow the function alongside the business
- Passionate advocate for governance, risk, and compliance, believing that these are not merely check box activities, but vital tools that significantly improve security posture and protect the organization
More about this role
Join Rightway as a Security GRC Manager, a role that owns and matures our GRC function. You will enhance our policies and procedures, streamline workflows, mature our risk management program, own our integrated SOC 2 + HITRUST attestation as we scale, and lead the GRC team.
- Team Leadership: Lead and mentor a small GRC team, setting priorities, reviewing work, and growing the function alongside the business.
- Control Library Development: Own and evolve our unified control library, maintaining mappings across SOC 2, SOC 1, and the latest HITRUST version, and addressing gaps or inefficiencies as the organization and framework requirements change.
- Audit Ownership: In partnership with Engineering, IT, People, and Finance, lead the audit program for control requirements and evidence production, proactively in anticipation of SOC 1, SOC 2/HITRUST, and customer audits.
- Data Privacy and Protection: Partner with Legal as a key stakeholder in the Data Privacy program, including HIPAA/HITECH, BAAs, data privacy and protection impact assessments, incident/breach analysis, and data handling requirements.
- AI Governance: Own and mature the AI governance program modeled after ISO/IEC...
Browse similar: Startup jobs · Remote jobs