GRC Expert - HIPAA / PCI-DSS

Position Overview :

We are seeking a seasoned Policies and Standards Authoring Expert to lead the creation, revision, and governance of enterprise-wide Information Security and GRC-related documentation.

This role demands a deep understanding of cybersecurity frameworks, regulatory compliance obligations, and IT governance models across multiple geographies.

The ideal candidate will bring 710 years of hands-on GRC experience, with demonstrated expertise in developing policies, standards, procedures, and guidelines that align with industry best practices and organizational risk tolerance.

Key Responsibilities :

• Author, review, and maintain a comprehensive library of information security, privacy, and IT governance policies and standards.
• Ensure all documentation aligns with leading frameworks such as NIST CSF, NIST 800-53, ISO 27001, SOC 2, PCI DSS, HIPAA, DORA, and GDPR.
• Collaborate with legal, risk, privacy, audit, IT, and business teams to ensure policies are fit-for-purpose, legally defensible, and practically enforceable.
• Maintain a robust policy lifecycle governance process, including version control, approvals, and periodic review schedules.
• Develop accompanying procedures and guidelines to support policy adoption and operational integration.
• Lead internal reviews and gap assessments to benchmark policies against evolving regulatory or contractual requirements.
• Serve as subject matter expert on policy-related inquiries from internal stakeholders, regulators, and auditors.

Required Qualifications :

Preferred Qualifications :

Key Competencies :

(ref : hirist.tech)