Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 41 days ago

Director of Cybersecurity Governance, Risk and Compliance

Superlanet51 open roles

Pay
$185,000 – $215,000 a year
Where
Remote
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowDirector of Cybersecurity Governance, Risk and ComplianceSuperlanet · Remote

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Superlanet's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. Superlanet postings stay open a median of 1 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.3%14 days
  5. 35.6%30 days
  6. 58.1%60 days
This job: posted 41 days ago

Superlanet median: 1 days open

The posting

Superlanet is spearheading an executive search for a Director of Cybersecurity Governance, Risk & Compliance (GRC) for our healthcare client in Texas. This strategic leadership position reports directly to the Deputy Chief Information Security Officer and is responsible for building, maturing, and leading the organization's cybersecurity governance, risk management, compliance, third-party risk, incident response, and business continuity programs. This is a remote opportunity with travel required. Operating within a federated cybersecurity governance model, this leader will collaborate closely with enterprise security teams while maintaining ownership of healthcare-specific cybersecurity policies, risk management practices, and compliance programs supporting clinical, research, and business operations. The ideal candidate is a cybersecurity leader with deep experience in governance, risk management, compliance, HIPAA security, and healthcare cybersecurity program development. This individual will serve as a trusted advisor to executive leadership and partner closely with IT, Compliance, Privacy, Legal, Clinical Operations, Research, and Enterprise Risk stakeholders. Key Responsibilities Governance, Risk & Compliance Leadership Develop and execute the enterprise cybersecurity GRC strategy aligned with organizational objectives, regulatory requirements, and future hospital operations. Build, lead, and mentor a team of cybersecurity governance and compliance professionals. Establish cybersecurity metrics, KPIs, and executive reporting frameworks. Deliver executive-level reporting on cybersecurity risk, compliance posture, and program maturity. Partner with Internal Audit, Compliance, Privacy, Legal, and Enterprise Risk teams to align governance activities across the organization. Evaluate cybersecurity insurance and risk transfer strategies as part of the organization's residual risk management program. Risk Management Lead annual HIPAA Security Risk Analyses and remediation planning efforts. Maintain enterprise cybersecurity risk registers and track mitigation activities. Conduct risk assessments for clinical systems, enterprise applications, cloud platforms, and infrastructure environments. Perform business impact analyses to evaluate cybersecurity risks affecting clinical and business operations. Conduct cyber risk trend analysis and reporting to identify emerging threats and prioritize remediation efforts. Evaluate the effectiveness and cost-benefit of security controls and investments. Governance & Compliance Author and maintain cybersecurity policies, standards, and procedures. Ensure compliance with HIPAA, NIST, and other applicable regulatory and security frameworks. Develop healthcare-specific cybersecurity standards supporting clinical, research, and biomedical environments. Support audits, regulatory inquiries, and compliance reviews. Develop and oversee cybersecurity awareness, education, and behavior-change programs. Third-Party Risk Management Lead vendor security assessment and onboarding programs. Evaluate security controls, SOC reports, penetration testing results, and vendor risk documentation. Review technology contracts and Business Associate Agreements (BAAs) for security and compliance requirements. Develop vendor risk management processes, risk-tiering methodologies, and remediation plans. Incident Response & Business Continuity Own cybersecurity incident response governance and escalation processes. Develop and maintain business continuity and disaster recovery strategies. Coordinate tabletop exercises and organizational preparedness activities. Establish communication protocols, recovery procedures, and response playbooks for cybersecurity incidents. Research & Security Governance Support cybersecurity governance for research environments handling PHI, CUI, and other regulated data. Establish cloud security, application security, and secure development governance standards. Support vulnerability management, security testing, and threat-modeling activities. Partner with research and technology stakeholders to ensure secure adoption of emerging technologies. Required Qualifications Bachelor's degree required; Master's degree in Information Technology, Cybersecurity, Health Informatics, or a related field preferred. Equivalent experience will be considered. 8+ years of cybersecurity experience within healthcare, financial services, defense, research, higher education, or other highly regulated industries. 5+ years of progressive leadership experience in cybersecurity governance, risk management, compliance, or information security leadership roles. Healthcare provider, academic medical center, healthcare technology, or healthcare research experience. Demonstrated experience conducting or leading HIPAA Security Risk Analyses. Experience developing cybersecurity policies, governance frameworks, risk management programs, and executive reporting processes. Strong knowledge of cybersecurity frameworks including HIPAA, NIST Cybersecurity Framework (CSF), NIST 800-171, and healthcare security best practices. Experience presenting cybersecurity risks and compliance findings to executive leadership. Ability to influence cross-functional stakeholders and drive enterprise-wide cybersecurity initiatives. Required Certifications CISSP (Certified Information Systems Security Professional) Preferred Qualifications Experience with research security, Controlled Unclassified Information (CUI), CMMC, or NIST 800-171 compliance programs. Experience managing third-party cybersecurity risk programs in highly regulated environments. Experience developing security awareness and behavior-based cybersecurity education programs. Experience supporting Epic, Workday, Oracle ERP, or other large-scale healthcare technology ecosystems. Familiarity with cloud security governance, application security governance, and business continuity planning. Preferred Certifications HCISPP (Healthcare Information Security and Privacy Practitioner) CISM (Certified Information Security Manager) CRISC (Certified in Risk and Information Systems Control) CISA (Certified Information Systems Auditor) Healthcare-specific Governance, Risk & Compliance (GRC) certifications Benefits Salary based on qualifications and experience. $185,000 - $215,000 +

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Superlanet's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Superlanet's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Superlanet's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.