RemoteLeaf Logo
Log in Sign up

Director, Governance, Risk, and Compliance (GRC)

4 months, 1 week ago
United States
Full-time
Lead
Penetration Tester
Cybersecurity
HIPAA
Apply Now
Clover Health

Clover Health

Clover Health is a data-focused health insurance company that is revolutionizing the Medicare Advantage space by integrating innovative technology into its plans. With a focus on optimizing medical outcomes and reducing costs, Clover Health uses analyt...

Insurance
251-1K
Founded 2014
$925M raised
View All Jobs 20

Description

  • Define and evolve Clover Health’s security governance and risk management strategy aligned with enterprise objectives and the security roadmap.
  • Establish a risk-driven governance approach aligned with HIPAA, the NIST Cybersecurity Framework v2, and the NIST AI Risk Management Framework where applicable.
  • Anticipate security and regulatory risks 12+ months ahead using business, product, regulatory, and market signals.
  • Own Clover Health’s security compliance posture, including federal and state regulatory obligations.
  • Lead security-related audits, assessments, and regulatory inquiries in partnership with Legal, Compliance, Privacy, and Internal Audit.
  • Drive clarity, consistency, and maturity in security policies, standards, and procedures.
  • Lead the third-party security risk management program, including vendor due diligence, risk assessments, remediation tracking, and monitoring.
  • Manage a third-party GRC services vendor and ensure delivery quality, prioritization, and alignment to Clover’s risk appetite.
  • Lead governance and coordination for incident response, crisis management, disaster recovery, and business continuity.
  • Coordinate cross-functional problem solving on complex security and compliance issues and build durable partnerships across business functions.

Requirements

  • 8+ years of experience in information security, GRC, risk management, or related disciplines.
  • Demonstrated experience leading security governance and compliance programs in regulated environments.
  • Strong working knowledge of HIPAA and healthcare security requirements.
  • Experience operating in a public company or similarly regulated environment.
  • Proven experience managing third-party vendors providing GRC services or staff augmentation.
  • Hands-on experience with incident response governance, crisis management, disaster recovery, and business continuity.
  • Strong business acumen with the ability to translate security and compliance risks into business impact.
  • Excellent executive-level communication and stakeholder management skills.
  • Familiarity with NIST CSF v2 and NIST AI RMF, preferred.
  • Relevant certifications such as CISM, CRISC, or similar are a plus.

Benefits

  • Competitive base salary of $212,000 to $230,000 USD.
  • Equity opportunities, including an Employee Stock Purchase Plan with discounted equity.
  • Performance-based bonus program and 401(k) matching.
  • Comprehensive medical, dental, and vision coverage.
  • Remote-first culture with collaboration and flexibility.
  • Generous flexible time-off policy, plus No-Meeting Fridays and monthly company holidays.
  • Mental health resources and professional development funding, mentorship, and learning programs.
  • Paid parental leave and reimbursement for office setup expenses, plus a monthly cell phone and internet stipend.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Greenlight

Staff Offensive Security Engineer

Greenlight 251-1K Capital Markets

Greenlight is hiring a Staff Offensive Security Engineer to lead continuous offensive security validation across its fintech platforms, cloud infrastructure, corporate environments, mobile applications, and emerging hardware products.

United States Full-time Lead Penetration Tester
$165k-$200k
Android AWS Bash CI/CD Go iOS Kubernetes Node.js Penetration Testing Python
2 days, 7 hours ago
AHEAD

Principal Technical Consultant - Network Security

AHEAD 1K-5K IT Services

AHEAD is seeking a Principal Technical Consultant to lead complex, client-facing network security engagements spanning firewalls, network access control, application delivery, SASE, and Zero Trust, from architecture through implementation and knowledge transfer.

United States Full-time Lead Penetration Tester
$210k-$240k
Ansible AWS Azure CI/CD CloudFormation DNS GCP HIPAA JSON Kubernetes Microservices Network Security OpenAPI SIEM Splunk Terraform XML
3 days, 8 hours ago
AHEAD

Senior Consultant - Cyber Resilience

AHEAD 1K-5K IT Services

AHEAD is hiring a Senior Consultant to help enterprise clients improve cyber incident recovery, disaster recovery, resilience programs, and recovery validation from strategy through implementation.

United States Full-time Senior Penetration Tester
$160k-$200k
Cybersecurity Network Security
4 days, 8 hours ago
Coalfire

Associate, Compliance Security Penetration Tester

Coalfire 251-1K Internet Software & Services

Coalfire is seeking a penetration testing professional to conduct cybersecurity assessments and simulate sophisticated attacks for clients across network, application, cloud, wireless, and social engineering environments.

United States Full-time Junior Penetration Tester
$64k-$117k
C Cybersecurity HIPAA Network Security Penetration Testing PowerShell Python Ruby Shell Scripting
4 days, 8 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers