Director of Governance Risk and Compliance
90k - 90k USD
Hybrid
Full Time
#Healthcare
#Diagnostics
#Compliance
#HITRUST
#ISO 27001
#HIPAA
#Risk Management
#Audit Management
#Automation
#Communication
#Risk
At LetsGetChecked, we are on a mission to change the way the world approaches personal wellness. Since our founding in 2015, we have built an end-to-end healthcare model that spans manufacturing, logistics, lab analysis, and virtual care, all designed to help people manage their health from the comfort of home. With our co-headquarters in Dublin and Atlanta, we are a global team dedicated to empowering individuals to live longer, happier lives. We are looking for a strategic leader to join our Information Security team and help us maintain the high standards of trust and safety that our customers rely on every day.
The opportunity
We are seeking an experienced Director of Governance, Risk, and Compliance to act as the primary architect for our security and compliance frameworks. In this executive role, you will be the bridge between our technical security controls and our broader business goals. You will lead our efforts to achieve and maintain critical certifications, including HITRUST CSF and ISO 27001, while ensuring our operations remain fully aligned with HIPAA and HITECH requirements. This is a pivotal position for someone who excels at translating complex technical risks into clear business strategies.
A day in the life
- You will own the roadmap for our HITRUST and ISO certification cycles, managing relationships with external assessors and overseeing the evidence-collection process to ensure we meet our audit goals.
- You will lead our GRC Steering Committee, providing regular updates to leadership on our risk posture and working cross-functionally with IT and Clinical Operations to remediate control deficiencies.
- You will drive the transition from point-in-time compliance to a model of continuous monitoring by leveraging automation tools, while also overseeing our third-party risk management program.
Who you are
You are a seasoned professional with over 10 years of experience in IT or Security GRC, including at least 5 years in a leadership capacity. You possess a deep understanding of healthcare regulations and have successfully guided an organization through a full HITRUST or ISO 27001 certification cycle. We are looking for a candidate who is a strong communicator, capable of influencing clinical leaders and explaining technical risks to stakeholders at all levels. You should hold a bachelor’s degree in a relevant field and possess certifications such as CISA, CISM, or CISSP, with a CCSFP designation being highly desirable.
Why you'll love it here
We are pleased to offer a base salary of 90,000 EUR for this position. Beyond the compensation, we are committed to supporting your well-being and professional growth through a comprehensive benefits package. You will enjoy the flexibility of a hybrid work environment, along with the following perks:
- Comprehensive medical insurance and an employee assistance program.
- Generous paid time off and flexible working hours.
- Support for your family life with maternity and paternity leave.
