• Lead a team of analysts to build and maintain an effective GRC program • Collaborate with Information Security department and other teams on security controls • Establish IT audit procedures relevant to regulations like HITRUST/HIPAA • Maintain and manage the Third-Party Risk Management program • Develop training programs and FAQs related to data protection • Create and manage corrective action plans (CAPs) related to security assessments