Health Care Service Corporation

Executive Director, Governance Risk & Compliance

Health Care Service Corporation$177K — $329K *
Healthcare
11 - 15 years of experience
Job Overview by Ladders

Qualifications

  • Bachelor’s degree with 15 years in IT/Information Security, or 19 years experience without a degree.
  • At least 7 years of people leadership experience, preferably multi-team.
  • Demonstrated ability to lead enterprise GRC programs, including risk and compliance management.
  • Experience in briefing C-suite and Board, with budget ownership.
  • Familiar with regulatory regimes like HIPAA/HITRUST and enterprise control frameworks.

Responsibilities

  • Set the enterprise security risk and compliance strategy across the organization.
  • Lead the development and maintenance of the enterprise GRC framework.
  • Manage all enterprise attestations and certifications, including SOX, HIPAA, and HITRUST.
  • Govern security policy, including exceptions and initiatives.
  • Oversee threat and vulnerability management processes.
  • Enhance security risk management capabilities and controls continuously.
  • Ensure regulatory alignment and reporting to the C-suite and Board.

Benefits

  • Comprehensive health and wellness benefits.
  • 401(k) savings plan and pension plan.
  • Paid time off and paid parental leave.
  • Disability insurance and supplemental life insurance.
  • Employee assistance program and paid holidays.
  • Tuition reimbursement and other incentives.
Full Job Description
Job Summary


This position provides enterprise leadership for security risk and compliance by setting strategy, owning GRC outcomes, and ensuring regulatory alignment across the company and its subsidiaries. The Executive Director builds and sustains the enterprise GRC framework and leads all enterprise attestations and certifications, including SOX, HIPAA, and HITRUST, supported by clear C suite and Board reporting. The role governs security policy, exceptions, security awareness initiatives, and third party risk management, while enabling consistent identification, tracking, remediation, and reporting of security risks across the enterprise. Responsibilities also include overseeing processes for threat and vulnerability management, ensuring adherence to established risk policies and standards, and continuously improving security risk management capabilities and controls. The Executive Director owns the enterprise information security risk posture, budget stewardship, and cross functional alignment with Legal, Compliance, IT, and Business stakeholders

Required Job Qualifications:

  • Bachelor’s degree and 15 years of experience in IT/Information Security; or 19 years of experience without a degree.
  • Minimum 7 years ofpeopleleadership experience (multiteam leadership preferred).
  • Proven experience leading enterprise GRC programs (risk, compliance, policy, thirdparty risk, subsidiary governance).
  • Demonstrated success briefing executives/Board, owning budgets, and driving crossfunctional outcomes.

Preferred Job Qualifications:

Executive experience with regulatory regimes (e.g., HIPAA/HITRUST, SOX) and enterprise control frameworks (NIST CSF/80053, ISO 27001).


Are you being referred to one of our roles? If so, ask your connection at HCSC about our Employee Referral process!


Pay Transparency Statement:

At Health Care Service Corporation, you will be part of an organization committed to offering meaningful benefits to our employees to support their life outside of work. From health and wellness benefits, 401(k) savings plan, pension plan, paid time off, paid parental leave, disability insurance, supplemental life insurance, employee assistance program, paid holidays, tuition reimbursement, plus other incentives, we offer a robust total rewards package for employees. Learn more about our benefit offerings by visiting .

The compensation offered will vary depending on your job-related skills, education, knowledge, and experience. This role aligns with an annual incentive bonus plansubject to the terms and the conditions of the plan.

Base Pay Range
$177,500.00 - $329,800.00

Exact compensation may vary based on skills, experience, and location.

About Health Care Service Corporation

Health Care Service Corporation (HCSC) is the largest customer-owned health insurer in the United States. HCSC offers a wide variety of health insurance products and related services, through its operating divisions and subsidiaries in Illinois, Montana, New Mexico, Oklahoma and Texas. HCSC's headquarters is located in Chicago, Illinois.
Learn more about Health Care Service Corporation
Size
24,000 employees
Industry
Founded
1936

Similar Jobs

More Jobs at Health Care Service Corporation

More Healthcare Jobs

Find similar Executive Director, Governance Risk & Compliance jobs: