GRC Security Manager

We are looking for an experienced GRC Security Manager to lead cybersecurity governance, risk, and compliance efforts for a health-focused organization in West Valley City, Utah. This position will shape security policies, evaluate enterprise risk, and strengthen compliance practices across the business. The role also works closely with audit, legal, privacy, procurement, and technical teams to improve resilience, manage third-party exposure, and support informed security decision-making.

Responsibilities:
• Lead enterprise-wide cybersecurity risk reviews to uncover control gaps, assess potential impact, and prioritize remediation plans.
• Create and maintain security policies, standards, and operating procedures that support regulatory expectations and business objectives.
• Partner with departmental leaders to ensure security requirements are clearly communicated, adopted effectively, and consistently followed.
• Build and manage employee security awareness initiatives, updating training content to address evolving threats and measuring program effectiveness.
• Serve as the main point of contact for internal audit activities related to cybersecurity controls, evidence gathering, and issue follow-up.
• Direct compliance efforts tied to applicable security and privacy frameworks, coordinating cross-functional teams to maintain readiness and adherence.
• Develop reporting dashboards and performance indicators that provide leadership with visibility into cyber risk trends and program maturity.
• Oversee third-party security evaluations, including due diligence reviews, risk assessments, and collaboration on contract-related security requirements.
• Identify cybersecurity concerns associated with AI usage and work with technical stakeholders to integrate those risks into the broader control framework.
• Collaborate with privacy and legal partners to align cybersecurity practices with data protection obligations and regulatory requirements.