Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 2 days ago

Lead Governance, Risk and Compliance Manager

Cohere Health71 open roles

Pay
$133,000 – $145,000 a year
Where
United States
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowLead Governance, Risk and Compliance ManagerCohere Health · United States

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Cohere Health's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.5% of postings close within 7 days. Measured by our own scanner across the market. Cohere Health postings stay open a median of 27 days.

Share of postings closed within
  1. 2.3%1 day
  2. 4.6%3 days
  3. 13.5%7 days
  4. 21.8%14 days
  5. 36.6%30 days
  6. 58.9%60 days
This job: posted 2 days ago

Cohere Health median: 27 days open

The posting

Opportunity Overview

We’re looking for an experienced Lead Governance, Risk and Compliance (GRC) Manager to lead and mature our enterprise security governance, risk management, regulatory compliance, and customer assurance programs. In this role, you will drive operational excellence across compliance frameworks, security risk management, third-party assurance, and customer-facing security initiatives while strengthening the processes and technology that support our growing business.

This is a hands-on leadership role suited for an experienced GRC professional who can independently manage complex initiatives, influence cross-functional stakeholders, and build scalable, repeatable operations. You’ll work closely with Security, Engineering, IT, Legal, Sales, Customer Success, and executive leadership to advance our security posture, accelerate customer trust, and enable business growth.

What you’ll do:

  • Lead and mature Cohere’s GRC program, establishing scalable governance processes, operating procedures, risk management practices, and measurable performance indicators aligned with business objectives.
  • Own the deployment, configuration, and optimization of enterprise GRC platforms, including control mapping, evidence automation, risk registers, continuous monitoring, and compliance reporting.
  • Direct compliance and certification initiatives across HITRUST, HIPAA, ISO 27001, and applicable regulatory requirements, ensuring ongoing audit readiness and effective control execution.
  • Lead customer security assurance activities, including security questionnaires, due diligence requests, customer audits, executive briefings, and security discussions with prospective and existing clients.
  • Partner with Sales, Customer Success, and Marketing to develop security-focused go-to-market materials, establish and maintain a customer-facing Trust Center, and strengthen security as a competitive differentiator.
  • Review and negotiate security-related contractual requirements in partnership with Legal, including Data Protection Agreements (DPAs), Business Associate Agreements (BAAs), security exhibits, and customer security obligations.
  • Oversee enterprise risk management activities, including risk assessments, remediation tracking, exception management, and the enforcement and reporting of vulnerability remediation SLAs across Engineering, Platform, DevOps, and Data teams.
  • Govern identity and access compliance, including periodic access reviews, privileged access certifications, segregation of duties, and remediation of access control deficiencies.
  • Establish and maintain cross-functional GRC engagement with business units to align security policies, controls, risk ownership, and compliance obligations with operational priorities.
  • Develop and deliver executive-level presentations, dashboards, and reporting that communicate compliance posture, risk exposure, remediation performance, customer assurance metrics, and program maturity.
  • Build and scale a high-performing GRC function, establishing repeatable processes, developing team capabilities, managing external assessors and partners, and driving continuous improvement with minimal day-to-day oversight.

What you’ll need:

  • 8+ years of progressive experience in information security, governance, risk management, compliance, or IT audit, including 2+ years leading GRC initiatives, programs, and/or teams.
  • Professional certifications such as CISM, CISSP, CRISC, CISA, CGRC, or HITRUST CCSFP.
  • Deep working knowledge of HITRUST, ISO 27001, and HIPAA including direct experience managing assessments, implementing controls, coordinating audits, and maintaining certification readiness.
  • Demonstrated experience deploying and administering enterprise GRC platforms, including implementation, workflow design, control mapping, evidence collection, reporting, and process automation.
  • Familiarity with the NIST Cybersecurity Framework, NIST AI Risk Management Framework, ISO 27017, ISO 27018, ISO 42001, and privacy-related security requirements.
  • Deep understanding of enterprise risk management, including risk registers, control assessments, risk treatment plans, vulnerability remediation SLAs, and formal exception management.
  • Demonstrated project and program management capabilities, including managing concurrent initiatives, developing operational roadmaps, establishing KPIs, and delivering results independently.
  • Proven experience leading customer assurance programs, including security questionnaires, customer-facing security meetings, due diligence reviews, and responding to enterprise customer requirements.
  • Experience with GRC platforms such as Vanta, Anecdotes, ZenGRC, Drata, ServiceNow GRC, or similar enterprise solutions.
  • Demonstrated success developing GRC program maturity models, executive scorecards, and risk-based reporting frameworks.
  • Excellent written and verbal communication, executive presentation, and analytical reporting skills, with the ability to translate complex security and compliance requirements into actionable business insights.
  • Working knowledge of contractual security requirements, including reviewing and redlining security exhibits, DPAs, BAAs, and customer agreements in collaboration with Legal.
  • Demonstrated ability to partner with Sales, Customer Success, and business stakeholders to develop customer assurance materials, security documentation, and go-to-market enablement resources.
  • Experience designing, launching, or administering a customer-facing Security Trust Center and associated assurance workflows.
  • Background in healthcare technology, SaaS, AI/ML-driven organizations, or other highly regulated environments.

Pay & Perks:

💻 Fully remote opportunity with about 5% travel

🩺 Medical, dental, vision, life, disability insurance, and Employee Assistance Program

📈 401K retirement plan with company match; flexible spending and health savings account

🏝️ Flex Time Off + company holidays

👶 Up to 14 weeks of paid parental leave

🐶 Pet insurance

The salary range for this position is $133,000 to $145,000 annually; as part of a total benefits package which includes health insurance, 401k and bonus. In accordance with state applicable laws, Cohere is required to provide a reasonable estimate of the compensation range for this role. Individual pay decisions are ultimately based on a number of factors, including but not limited to qualifications for the role, experience level, skillset, and internal alignment.

Interview Process*:

  1. Connect with Talent Acquisition for a Preliminary Phone Screening
  2. Meet your Hiring Manager!
  3. Case Study
  4. Cross functional interview

*Subject to change

About Cohere Health:

Cohere Health’s clinical intelligence platform and agentic AI-powered solutions connect health plans’ strategic goals and providers’ needs, optimizing the speed, cost, and quality of care. With an enterprise approach that streamlines payer-provider decision-making across the care continuum–including policy, prior authorization, payment accuracy, and more–the company improves collaboration and reduces burden, resulting in up to 8x ROI and 94% provider satisfaction.

With the acquisition of ZignaAI, we’ve further enhanced our platform by launching our Payment Integrity Suite, anchored by Cohere Validate™, an AI-driven clinical and coding validation solution that operates in near real-time. By unifying pre-service authorization data with post-service claims validation, we’re creating a transparent healthcare ecosystem that reduces waste, improves payer-provider collaboration and patient outcomes, and ensures providers are paid promptly and accurately.

Cohere Health’s innovations continue to receive industry wide recognition. We’ve been named to the 2025 Inc. 5000 list and in the Gartner® Hype Cycle™ for U.S. Healthcare Payers (2022-2025), and ranked as a Top 5 LinkedIn™ Startup for 2023 & 2024. Backed by leading investors such as Deerfield Management, Define Ventures, Flare Capital Partners, Longitude Capital, and Polaris Partners.

The Coherenauts, as we call ourselves, who succeed here are empathetic teammates who are candid, kind, caring, and embody our core values and principles. We believe that diverse, inclusive teams make the most impactful work. Cohere is deeply invested in ensuring that we have a supportive, growth-oriented environment that works for everyone.

We can’t wait to learn more about you and meet you at Cohere Health!

Equal Opportunity Statement:

Cohere Health is an Equal Opportunity Employer. We are committed to fostering an environment of mutual respect where equal employment opportunities are available to all. To us, it’s personal.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Cohere Health's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Cohere Health's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Cohere Health's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.