Role: Director, Governance, Risk & Compliance (GRC) Location: Addison, TX (Hybrid - 2-4 days onsite, 4 days preferred*)
Employment Type: Full-Time
Position Summary We are seeking an experienced Director of Governance, Risk & Compliance (GRC) to lead and mature our enterprise governance, risk management, and compliance program. This strategic leadership role will be responsible for overseeing regulatory compliance initiatives, audit programs, third-party risk management, and enterprise security governance while partnering closely with executive leadership across the organization.
The ideal candidate is an accomplished GRC leader who has successfully owned enterprise compliance programs, led complex audits, and possesses the executive presence to effectively communicate risk, compliance, and control objectives to both technical and business stakeholders.
Key Responsibilities - Lead the organization's Governance, Risk & Compliance (GRC) program and drive continuous program maturity.
- Own and manage the enterprise SOX compliance program, including planning, execution, remediation, and audit coordination.
- Lead SOC 2 Type II compliance efforts and serve as the primary point of contact for external auditors.
- Develop, maintain, and enhance IT control frameworks and governance processes.
- Partner with business and technology leaders to identify, assess, and mitigate enterprise risk.
- Provide executive-level reporting on compliance initiatives, audit readiness, and organizational risk posture.
- Oversee Third-Party Risk Management (TPRM), including vendor risk assessments and ongoing monitoring.
- Support governance activities related to security questionnaires, customer due diligence requests, and regulatory inquiries.
- Develop policies, standards, and procedures that align with industry best practices and regulatory requirements.
- Lead and mentor a high-performing GRC team while fostering collaboration across Information Security, IT, Internal Audit, Legal, Privacy, and business units.
- Drive continuous improvement initiatives to enhance operational efficiency and compliance effectiveness.
Required Qualifications - Bachelor's degree in Information Systems, Cybersecurity, Computer Science, Business, or a related discipline (Master's degree preferred).
- 10+ years of progressive experience in Governance, Risk & Compliance, Information Security, IT Audit, or related disciplines.
- 5+ years of leadership experience managing GRC or Information Security teams.
- Demonstrated experience owning and leading enterprise SOX compliance programs.
- Experience leading SOC 2 Type II audits from planning through successful completion.
- Strong knowledge of IT General Controls (ITGCs), internal controls, risk management, and compliance methodologies.
- Experience developing and implementing enterprise governance programs.
- Excellent communication and presentation skills with the ability to engage executive leadership and translate complex technical concepts into business-friendly language.
- Proven ability to influence cross-functional stakeholders and drive organizational change.
Preferred Qualifications - Experience within a healthcare or highly regulated industry.
- Familiarity with healthcare regulatory requirements, including HIPAA.
- Experience leading Third-Party Risk Management (TPRM) programs.
- Working knowledge of vendor risk management and enterprise governance practices.
- Experience supporting regulatory, customer, and compliance questionnaires.
- Professional certifications such as CISSP, CISA, CRISC, CGEIT, CISM, or similar are highly preferred.
Technical Knowledge Experience with one or more of the following is preferred:
- NIST Cybersecurity Framework (CSF)
- SOX Compliance
- SOC 2 Type II
- HIPAA
- Enterprise Risk Management (ERM)
- Third-Party Risk Management (TPRM)
- IT General Controls (ITGCs)
- Governance, Risk & Compliance (GRC) platforms
Leadership Profile The successful candidate will be:
- A strategic and collaborative leader who can build relationships across the organization.
- An exceptional communicator with strong executive presence.
- Comfortable presenting to senior leadership and executive stakeholders.
- Highly organized with the ability to manage multiple enterprise initiatives simultaneously.
- A proactive problem solver who can balance business objectives with risk management and compliance requirements.
- Passionate about building scalable governance programs that support organizational growth.
Why Join Us? This is an opportunity to shape and lead an enterprise GRC function within a growing organization where governance, security, and compliance are strategic priorities. You'll partner with executive leadership, influence enterprise-wide initiatives, and help strengthen the organization's overall risk and compliance posture while leading a talented and collaborative team.
