Senior Manager, GRC

Maven Clinic
New York, Boston, District of Columbia, Chicago, Seattle, San Francisco
Workplace: HybridFull timeUSD 170,000 - 201,000 annuallyFunction: Solutions Engineering & Sales EngineeringSkills: ["Cross-team collaboration","Project management","Written communication","Stakeholder management","Compliance program management"]

Own governance, risk, and compliance for Maven’s B2B health benefits platform, leading GRC initiatives end to end. Manage SOC 2 Type II and HITRUST certification renewals, establish ISO 27001 and ISO 42001 programs, and run the audit calendar while translating regulatory/framework changes into control updates. Serve as the primary security/compliance contact for sales and customers, lead RFIs and security questionnaires, and build internal control monitoring to prevent audit findings.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Maven Clinic
Maven Clinic
2 days ago

Senior Manager, GRC

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 4 hours agoStatus: Live

Job Summary

Own governance, risk, and compliance for Maven’s B2B health benefits platform, leading GRC initiatives end to end. Manage SOC 2 Type II and HITRUST certification renewals, establish ISO 27001 and ISO 42001 programs, and run the audit calendar while translating regulatory/framework changes into control updates. Serve as the primary security/compliance contact for sales and customers, lead RFIs and security questionnaires, and build internal control monitoring to prevent audit findings.
Location: New York, Boston, District of Columbia, Chicago, Seattle, San Francisco
Workplace: Hybrid
Employment Type: Full time
Job Function: Solutions Engineering & Sales Engineering
Seniority: Sr. Manager level

Key Responsibilities

  • •Own end-to-end SOC 2 (Type II) and HITRUST continuation/renewal cycles, scoping, evidence collection, auditor work, and remediation tracking to final reports.
  • •Lead establishment of ISO 27001 and ISO 42001 certification programs, including gap assessments, control mapping, policy documentation, buy-in, and readiness for initial audits.
  • •Manage the ongoing audit calendar across frameworks by coordinating stakeholders and ensuring evidence and remediation are completed on time.
  • •Handle customer-facing security questionnaires and RFIs/RFPs for Sales and Customer Success, maintaining an answer library to meet deadlines.
  • •Build and run internal audit/control monitoring to verify external controls operate day to day and flag control gaps to the CISO/Head of Security.

Pay and Benefits

Salary: USD 170,000 - 201,000 annually
Equity and Bonus:Equity
Perks:Health InsuranceDental401kPaid LeaveLearning BudgetRemote Work

Key Requirements

  • •6+ years of experience in GRC, information security compliance, or IT audit, with ownership of at least one SOC 2 (or similar) audit cycle end to end.
  • •Hands-on working knowledge of SOC 2, HITRUST, and ISO 27001 frameworks.
  • •Experience responding to customer security questionnaires/RFIs, ideally in a B2B SaaS or healthcare-adjacent environment.
  • •Strong cross-team collaboration skills working with Engineering, IT, HR, Legal, and Sales to gather evidence and close gaps.
  • •Solid project management skills to sequence overlapping audits/certifications, track dependencies and remediation, and meet deadlines.
Experience:GRCInformation securityIT auditB2B SaaSHealthcareRegulated environment
Skills:Cross-team collaborationProject managementWritten communicationStakeholder managementCompliance program management
Certifications:CISACRISCCISSPPMPCAPMCISMCTRC/CAP
Tech Stack:SOC 2HITRUSTISO 27001ISO 42001VantaDrataSecureframeHyperproof

Company Brief

Maven Clinic
Maven Clinic is a virtual-first women’s and family healthcare platform offering telehealth services, care navigation, and employer-sponsored programs covering fertility, pregnancy, postpartum, pediatrics, and family planning.
Industry: HealthTech
Company Size: Large (251 to 1,000 employees)
Growth: Scaleup
Funding: Series D
Headquarters: New York, United States
Founded: 2014
WebsiteLinkedIn