RemoteLeaf Logo
Log in Sign up

Director, Governance, Risk, and Compliance (GRC)

3 months, 2 weeks ago
United States
Full-time
Lead
Penetration Tester
Cybersecurity
HIPAA
Apply Now
Clover Health

Clover Health

Clover Health is a data-focused health insurance company that is revolutionizing the Medicare Advantage space by integrating innovative technology into its plans. With a focus on optimizing medical outcomes and reducing costs, Clover Health uses analyt...

Insurance
251-1K
Founded 2014
$925M raised
View All Jobs 23

Description

  • Define and evolve Clover Health’s security governance and risk management strategy aligned with enterprise objectives and the security roadmap.
  • Establish a risk-driven governance approach aligned with HIPAA, the NIST Cybersecurity Framework v2, and the NIST AI Risk Management Framework where applicable.
  • Anticipate security and regulatory risks 12+ months ahead using business, product, regulatory, and market signals.
  • Own Clover Health’s security compliance posture, including federal and state regulatory obligations.
  • Lead security-related audits, assessments, and regulatory inquiries in partnership with Legal, Compliance, Privacy, and Internal Audit.
  • Drive clarity, consistency, and maturity in security policies, standards, and procedures.
  • Lead the third-party security risk management program, including vendor due diligence, risk assessments, remediation tracking, and monitoring.
  • Manage a third-party GRC services vendor and ensure delivery quality, prioritization, and alignment to Clover’s risk appetite.
  • Lead governance and coordination for incident response, crisis management, disaster recovery, and business continuity.
  • Coordinate cross-functional problem solving on complex security and compliance issues and build durable partnerships across business functions.

Requirements

  • 8+ years of experience in information security, GRC, risk management, or related disciplines.
  • Demonstrated experience leading security governance and compliance programs in regulated environments.
  • Strong working knowledge of HIPAA and healthcare security requirements.
  • Experience operating in a public company or similarly regulated environment.
  • Proven experience managing third-party vendors providing GRC services or staff augmentation.
  • Hands-on experience with incident response governance, crisis management, disaster recovery, and business continuity.
  • Strong business acumen with the ability to translate security and compliance risks into business impact.
  • Excellent executive-level communication and stakeholder management skills.
  • Familiarity with NIST CSF v2 and NIST AI RMF, preferred.
  • Relevant certifications such as CISM, CRISC, or similar are a plus.

Benefits

  • Competitive base salary of $212,000 to $230,000 USD.
  • Equity opportunities, including an Employee Stock Purchase Plan with discounted equity.
  • Performance-based bonus program and 401(k) matching.
  • Comprehensive medical, dental, and vision coverage.
  • Remote-first culture with collaboration and flexibility.
  • Generous flexible time-off policy, plus No-Meeting Fridays and monthly company holidays.
  • Mental health resources and professional development funding, mentorship, and learning programs.
  • Paid parental leave and reimbursement for office setup expenses, plus a monthly cell phone and internet stipend.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Insight Assurance

Ethical Hacker/Pentester Mid to Senior Level (5+ Years) - LATAM

Insight Assurance 11-50 Diversified Financial Services

Insight Assurance is hiring a Red Team Operator to simulate advanced cyber threats and help strengthen client security and compliance across a global audit environment.

Colombia Costa Rica Panama Brazil Senior Penetration Tester
Active Directory AWS Azure Bash Burp Suite Cybersecurity GCP Linux Metasploit Penetration Testing PowerShell Python WAF
13 hours, 19 minutes ago
At-Bay

Cyber Advisor, Post-Cyber Event Hardening

At-Bay 251-1K Insurance

At-Bay is hiring a Cyber Advisor for its Post-Cyber Event Hardening service to help insured customers strengthen their environments after a cyber incident and reduce the risk of future attacks.

United States Senior Penetration Tester
Active Directory AWS Azure
3 days, 13 hours ago
Kalles Group

IAM Product Owner Consultant

Kalles Group 11-50 Internet Software & Services

Kalles Group is hiring a remote IAM Product Owner Consultant to help drive a client’s CIAM program and coordinate delivery across a complex, cross-functional Agile environment.

Anywhere Full-time Senior Penetration Tester Product Owner
$110k-$150k
Agile
4 days, 12 hours ago
QuintoAndar

Grupo QuintoAndar | Information Security Manager - GRC

QuintoAndar 1K-5K Real Estate

Grupo QuintoAndar is hiring a Manager of Information Security, GRC to lead cyber governance, risk, and compliance efforts that enable safe, scalable business growth across a cloud-native, multinational environment.

Brazil Full-time Lead Penetration Tester
Cybersecurity
6 days, 12 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers