Director- GRC Cybersecurity

Key duties & responsibilities

Cybersecurity Risk Governance

• Lead the third-party cybersecurity risk management program with a focus on PHI / PII protection, HIPAA compliance, and critical vendor oversight.
• Drive assessments aligned with NIST CSF and ISO framework to evaluate and mature cybersecurity program
• Establish and maintain exception management, approval management and periodic monitoring
• Collaborate with global cybersecurity and IT teams for implementing automation through GRC tools.
• Oversee onboarding and offboarding processes to ensure alignment with security policies, BAAs (Business Associate Agreements), and regulatory requirements.
• Monitor and govern third-party relationships, conducting periodic risk assessments and ensuring timely remediation of findings.

Security awareness and culture

Audit & Compliance Leadership :

Governance Frameworks, Metrics & Reporting :

Cross-Functional Collaboration & Risk Advisory :

Qualification

Experience, Skills and Knowledge

Key competency profile

Skills Required

Risk Assessment, Compliance Management, Incident Response, policy development , Threat Intelligence