HHiring Reality
← Maven Clinic

Senior Manager, GRC

Maven Clinic
Location
New York, New York, United States; New York, NY; Remote, US (Hub cities)
Posted
12 days ago
Department
Information Technology
Salary
$170,000 - $201,000
What they actually want (must-haves)
  • 6+ years of experience in GRC, information security compliance, or IT audit
  • Direct ownership of at least one SOC 2 or similar audit cycle from start to finish
  • Working knowledge of SOC 2, HITRUST, and ISO 27001 frameworks
  • Experience responding to customer security questionnaires/RFIs in a B2B SaaS or healthcare-adjacent environment
  • Strong cross-team collaboration skills
  • Solid project management instincts
Nice to have
  • Direct experience standing up a new certification (SOC2, HITRUST, ISO 27001 and/or ISO 42001)
  • Experience with GRC/compliance automation tooling
  • Background in health tech, digital health, or another regulated B2B vertical
  • A relevant certification such as CISA, CRISC, CISSP, PMP or CAPM, CISM, CTRC/CAP
  • Exposure to vulnerability management or IT operations
What the job really is

As a Senior Manager of Governance, Risk, and Compliance (GRC) at Maven Clinic, you will lead the GRC function for the company's B2B health benefits platform. Your responsibilities will include managing audits, writing policies, and ensuring compliance with various frameworks like SOC 2 and HITRUST. You will collaborate with multiple teams, engage with customers on compliance matters, and oversee the internal audit program to maintain operational integrity.

Benefits
  • Employer-covered health, dental, and insurance plan options
  • Access to the full platform and specialists through Maven for Mavens
  • Whole-self care through wellness partnerships
  • Hybrid work, in office meals, and work together days
  • 16 weeks 100% paid parental leave and new parent stipend
  • Annual professional development stipend and access to a personal career coach
Things to weigh
  • No specific mention of a technology stack or tools used in the GRC function
  • The role requires significant cross-team collaboration, which may vary in complexity
  • The position reports directly to the CISO, indicating a high level of responsibility and visibility
Job score4.4/5
Benefits4/5
Freshness5/5
Career value4/5
Role clarity4/5
Pay transparency5/5

Applying to Maven Clinic?

See how your résumé matches this role — and tailor it from what actually gets interviews.

Calculate resume scoreGenerate resume to apply
Job Link →