Senior IT Governance Risk and Compliance Coordinator

Job Requirements Position Summary The Senior IT GRC Coordinator, reporting to the Chief Information Security Officer (CISO), leads the Information Technology Governance, Risk, and Compliance program within Information Technology. This role is responsible for IT documentation lifecycle governance, disaster recovery documentation readiness, policy and procedure management, and continuous improvement of the organization's GRC documentation posture. The Senior IT GRC Coordinator serves as the primary documentation lead during cybersecurity incidents and disaster recovery exercises, drives maturity of IT standards, ensures compliance with HIPAA, NIST CSF, CIS Controls, and PCI DSS, and leads after-action review processes.

This position plays a critical role in strengthening the organization's governance maturity, compliance posture, and operational resilience by ensuring that all IT documentation is accurate, current, retrievable, and audit-ready.

Minimum Requirements Education
· Bachelor's degree in Information Technology, Information Security, Technical Communications, Healthcare Administration, or a related field.

Experience
· 5-7 years of experience in IT governance, risk, compliance, documentation management, or a related field, preferably in a healthcare environment.
· Demonstrated experience developing and maintaining IT policies, procedures, runbooks, and playbooks.
· Experience with disaster recovery planning and documentation.
· Experience with document lifecycle management tools and version control.

License/Registration/Certifications       
· N/AOther Knowledge, Skills, and Abilities  
· Strong knowledge of healthcare regulatory frameworks including HIPAA, NIST CSF, and CIS Controls.
· Proven ability to manage projects, coordinate cross-functional teams, and meet deadlines.
· Excellent written and verbal communication skills with the ability to translate technical concepts into clear, actionable documentation.

Preferred Requirements Preferred Education
· Master's degree in Information Security, Healthcare Informatics, or a related field.

Preferred Experience
· Experience in a healthcare system with 5,000+ associates.
· Familiarity with Joint Commission, CMS, or DNV accreditation requirements.
· Experience with documentation management systems.

Preferred License/Registration/Certifications   
· ITIL 4 Foundation or higher.
· Project Management Professional (PMP) or Certified Associate in Project Management (CAPM).
· Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC), or Certified in the Governance of Enterprise IT (CGEIT).
· Certified Document Imaging Architect (CDIA+) or equivalent.

Core Job Responsibilities Documentation Governance & Standards
· Own the IT documentation lifecycle including templates, version control, review cycles, quality assurance, and recertification.
· Develop and maintain standardized templates for policies, procedures, runbooks, playbooks, guidelines, and standards.
· Manage the centralized IT documentation repository, ensuring all documents are current, accessible, and properly classified.
· Lead annual documentation quality audits and maintain a documentation maturity scorecard.
· Establish and enforce documentation naming conventions, metadata standards, and retention schedules.

Disaster Recovery & Incident Response Documentation
· Lead the development and maintenance of all DR runbooks and operational recovery playbooks in accordance with the SRHS Operational Recovery Runbook Template and Protiviti audit recommendations.
· Ensure all runbooks include purpose, scope, assumptions, RACI, failover strategy, critical dependencies, communications plan, and step-by-step recovery procedures executable by non-key personnel.
· Serve…