Senior Manager, Governance, Risk, and Compliance
Virta HealthTelemedicine company
Remote$161,500-209,000/yearManager
Tiger Global Management
Sequoia Capital
Venrock
Caffeinated Capital
Creandum
Obvious Ventures
Legal & Compliance
About the role
TL;DR
Lead Virta Health's GRC function, automating compliance and enabling commercial velocity.
- •Lead Virta Health's Governance, Risk, and Compliance (GRC) function in a highly automated, AI-first environment.
- •You will be the champion of security compliance and risk culture, collaborating with Sales, supervising audits, and hardening key frameworks.
- •Key Responsibilities Maintain and mature information security compliance programs, policies, and controls.
- •Automate continuous evidence collection for HIPAA, HITRUST CSF, and SOC 2 certifications.
- •Partner with Sales and Customer Success to navigate enterprise customer evaluations and security reviews.
- •Own policy lifecycle, exception management, vendor risk assessments, and executive risk reporting.
- •Design and optimize frictionless ticketing workflows for employee SaaS reviews and compliance requests.
- •Requirements 7+ years of experience in Cybersecurity GRC, IT Auditing, or Information Security Compliance, with 2+ years leading programs in regulated environments.
- •Hands-on experience with HITRUST CSF, HIPAA, and SOC 2 frameworks.
- •Proven track record leveraging GRC automation platforms (e.g., Vanta) to scale compliance programs.
- •Strong client-facing communication skills for enterprise security evaluations and RFPs.
- •Ability to operate in gray areas, balancing risk tolerance, efficiency, and regulatory requirements.
Required skills
HIPAASOC 2Compliance Management
Nice-to-have skills
Jira
Domain expertise
healthcarecybersecurity
Tech stack
HIPAASOC 2Jira