Collect evidence for SOC 2 Type 2 and HITRUST, including internal audit testing of controls.
Update security and privacy policies, manage versions, and track acknowledgements.
Run third-party vendor risk assessments and support the privacy and data program.
Ceresti is a tech-enabled dementia care provider that supports family caregivers and improves outcomes for people living with dementia, delivering cost savings to health plans and ACOs. Our culture is rooted in agility, innovation, and collaboration, where every idea can spark meaningful improvement.
Lead and mentor a growing GRC team, establishing priorities and developing compliance functions.
Oversee SOC 1, SOC 2, and HITRUST CSF compliance programs, audits, and control libraries.
Manage AI governance, privacy, third-party risk, and customer security assurance initiatives.
This partner company operates in healthcare technology, focusing on data protection and compliance. It is a high-growth remote-first organization with a small but growing GRC team, emphasizing practical controls and embedded security.
Manage SOC 2, HITRUST, and ISO 27001 audits, including internal control testing and external assessments.
Serve as the GRC subject matter expert, maintaining the risk register, compliance policies, and trust center.
Partner with Engineering, Product, People, and Legal to automate GRC tasks and report posture to leadership.
Garner Health uses clinical data and incentives to steer members toward higher-quality, lower-cost care in partnership with employers. We've doubled five years running, raised a Series E, and maintain a mission-driven, high-accountability culture.