Director, Governance, Risk & Compliance; GRC)

At MTM, we are not just colleagues; we are collaborators on a shared mission;communities without barriers. We have exciting opportunities to join our growing team where your work has a direct impact on the communities we serve. Our company culture is one of innovation, collaboration, and growth. If you are passionate, driven, and ready to join a team where your work will directly transform and shape our industry, then we want to talk to you!

The Director, Governance, Risk & Compliance (GRC) serves as the enterprise’s senior leader responsible for governing the compliance dimensions of modern technology and AI. This role is a second line of defense, and provides the strategic oversight and assurance needed to ensure the organization’s technology, and AI ecosystem aligns with regulatory expectations, ethical standards, and customer commitments.

The Director, GRC owns the technology & AI compliance Framework, oversees governance for high‑risk technologies, and ensures the organization is prepared for external scrutiny, including certifications such as SOC 2, HITRUST, and FedRAMP.

This is a governance and risk leadership position, ideal for someone who understands technology deeply but operates with a compliance, assurance, and regulatory mindset.

• Lead compliance oversight for SOC 2, HITRUST, FedRAMP, and similar certifications

• Ensure first-line teams produce audit-ready artifacts

• Track remediation and risk closure

• Lead enterprise governance for technology and AI within the Compliance function

• Own policies, standards, and controls related to cloud, data, AI/ML/GenAI, automation, and software development

• Drive risk-tiering and governance requirements for technology and AI systems

• Ensure alignment to regulatory, ethical, and customer expectations

• Establish KRIs and KPIs for technology and AI compliance (control maturity, issues, exceptions, drift signals, audit readiness)

• Provide regular reporting to senior leadership and the AI Governance Committee

• Lead thematic reviews of technical risk trends and emerging threats

• Ensure cloud and SaaS environments meet compliance-related controls (SOC 2, HITRUST, FedRAMP)

• Validate due diligence, technical assessments, and ongoing monitoring for technology adoption

• Ensure data governance practices incorporate compliance standards for classification, retention, quality, and access

• Support privacy with DPIAs and data-related assessments

• Deliver training on AI governance, cloud/SaaS compliance, and technology risks

• Build processes, templates, and playbooks that operationalize compliance expectations

• Serve as a strategic advisor to technology, data, and AI leaders

• Govern AI risk assessments, use-case oversight, and documentation standards

• Define compliance criteria for high-risk AI

• Monitor evolving AI regulations

• Set compliance expectations for technology and AI vendors

• Oversee due diligence, contractual requirements, and ongoing vendor monitoring

• Define compliance-required controls; review and challenge technical architecture, risk assessments, and AI documentation

• Oversee compliance evidence requirements (e.g., model cards, testing results, data lineage)

• Advise on risk acceptance, control gaps, and compensating controls

• Provide daily guidance for team of direct reports

• High School Diploma or G.E.D

• 4+ years in technology compliance, technology risk, cybersecurity risk, audit, or data governance roles

• 4+ years of data analysis experience

• Experience with regulatory frameworks and certifications such as SOC 2, HITRUST, FedRAMP

• Strong command of AI governance, model risk, or responsible AI frameworks

• Excellent executive presence, judgment, and the ability to influence senior technical leaders

• Ability to translate complex technical concepts into actionable compliance requirements

• Outstanding analytical and organizational skills and attention to detail

• Ability to work independently and collaboratively with others to achieve defined goals

• Ability to motivate and empower employees

• Ability to work well under pressure

• Passion for…