Senior Manager, Governance, Risk, and Compliance

Virta Health
United States
Workplace: RemoteFull timeUSD 161,500 - 209,000 annuallyFunction: Legal, Risk & ComplianceExperience: 7+ yearsSkills: ["Risk governance","Cross-functional leadership","Client communication","Security awareness","Process automation"]

Lead the Governance, Risk, and Compliance (GRC) function in an AI-first, highly automated environment. Own and mature security compliance programs and policies, scale continuous evidence collection with Vanta, and ensure audit readiness for HIPAA, HITRUST CSF, and SOC 2. Partner with Sales and Customer Success on RFPs and security questionnaires, govern risk and exceptions, streamline employee compliance workflows, and coordinate cross-functional alignment and security training.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Virta Health
Virta Health
5 days ago

Senior Manager, Governance, Risk, and Compliance

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 13 hours agoStatus: Live

Job Summary

Lead the Governance, Risk, and Compliance (GRC) function in an AI-first, highly automated environment. Own and mature security compliance programs and policies, scale continuous evidence collection with Vanta, and ensure audit readiness for HIPAA, HITRUST CSF, and SOC 2. Partner with Sales and Customer Success on RFPs and security questionnaires, govern risk and exceptions, streamline employee compliance workflows, and coordinate cross-functional alignment and security training.
Location: United States
Workplace: Remote
Employment Type: Full time
Job Function: Legal, Risk & Compliance
Seniority: Sr. Manager level

Key Responsibilities

  • •Maintain and mature the information security compliance program, policies, procedures, and controls as the organization scales, aligning the GRC framework to regulatory and industry best practices.
  • •Oversee GRC and compliance automation by scaling Vanta to automate continuous evidence collection and support HIPAA, HITRUST CSF, and SOC 2 audit readiness.
  • •Partner with Sales and Customer Success on RFPs and security questionnaires, communicating the security compliance posture to external stakeholders.
  • •Own security policy lifecycle governance, exception management, vendor risk assessments, and executive risk reporting, including regular risk assessments and mitigation guidance.
  • •Run frictionless GRC employee workflows by managing the security queue, designing ticketing workflows (Zendesk/Jira), SLAs, and delivering security awareness and compliance training.

Pay and Benefits

Salary: USD 161,500 - 209,000 annually
Equity and Bonus:Equity

Key Requirements

  • •7+ years in Cybersecurity GRC, IT Auditing, or Information Security Compliance, including 2+ years leading programs or managing teams in regulated environments (e.g., healthcare or digital health).
  • •Hands-on experience managing and maintaining HITRUST CSF, HIPAA, and SOC 2 frameworks.
  • •Track record leveraging SaaS GRC automation platforms such as Vanta or Drata to scale continuous compliance programs.
  • •Outstanding client-facing communication skills partnering with Sales/CS and managing enterprise security evaluations, vendor questionnaires, and RFP processes.
  • •Ability to design and implement repeatable AI-enabled workflows that improve efficiency.
Experience:7+ yearsHealthcareDigital healthSaaSRegulated environments
Skills:Risk governanceCross-functional leadershipClient communicationSecurity awarenessProcess automation
Certifications:HITRUST CSFHIPAASOC 2
Tech Stack:VantaDrataZendeskJiraOpenAIAWSGoogle GeminiISO 42001NIST AI RMF

Company Brief

Virta Health
Provides a telemedicine-based treatment platform for reversing type 2 diabetes and improving metabolic health through continuous remote care, personalized nutrition, coaching, and medical management.
Industry: HealthTech
Company Size: Large (251 to 1,000 employees)
Growth: Scaleup
Headquarters: San Francisco, United States
Founded: 2014
WebsiteLinkedIn