Impress employers and recruiters.
Choose from hundreds of resume examples.

Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

Own our GRC program end to end, keeping ClearDATA aligned with HIPAA, GDPR, HITRUST, SOC 2, etc. Maintain the Information Security Management Program, manage audit cycles, and work directly with auditors. This is a hands-on, senior role on the IT/ITSec team, partnering with security engineers and DevSecOps.

Responsibilities

• Maintain ClearDATA's Information Security Management Program, including policies, procedures, and standards.
• Support audits, assessments, and certification renewals for HIPAA, GDPR, HITRUST, and SOC 2.
• Maintain the risk register, including tracking third-party and vendor risk.
• Keep control mapping and audit evidence current and organized.
• Support incident response planning alongside the IT/ITSec Manager and security team.
• Partner with security engineers and DevSecOps to translate control requirements into system builds and operations.
• Update policies and program documentation as systems, vendors, or ownership of shared responsibilities change.
• Work directly with auditors to catch and close compliance gaps before they become findings.
• Flag open risk or outstanding items that need attention.
• Act as the go-to compliance resource across the company, helping teams find workable paths forward and providing clear risk assessments to leadership.

Requirements

• 5+ years in GRC, IT compliance, or information security compliance, ideally in regulated industries, in hands-on roles.
• Direct experience maintaining an Information Security Management Program or similar compliance program.
• Working knowledge of HIPAA, SOC 2, HITRUST, or GDPR; healthcare experience strongly preferred.
• Experience working directly with external auditors.
• Proven ability to work across a technical organization and up to executive leadership.
• Strong writing skills, comfortable turning operational and technical detail into clear policy language.
• Organized and detail-oriented, able to manage several compliance workstreams at once.
• A pragmatic approach to risk, able to differentiate between real and theoretical compliance issues.

Skills

• HIPAA
• GDPR
• HITRUST
• SOC 2
• Information Security Management Program
• Risk Register Management
• Third-Party Risk Management
• Vendor Risk Management
• Control Mapping
• Audit Evidence Management
• Incident Response Planning
• Policy Writing
• Compliance Documentation
• AWS
• Azure
• GCP
• GRC Tooling (e.g., Thoropass, OneTrust)

Location

• Remote

Work Type

• Full-time

Experience Level

• Senior

Education Level

• CISA, HITRUST CCSFP, or CRISC certification (Nice to Have)

Salary/Compensations

• $130 - 150K

Benefits

• Full benefits package medical, dental, vision, STD, Life benefits
• 3 weeks of vacation plus 5 personal days
• Employee stock ownership and RRSP program
• A chance to give back through community involvement
• Flexible work arrangements

About the Company

• Established in 2009, ClearDATA was born out of a need to address significant inefficiencies within the U.S. healthcare system, creating the first cloud compliance and security solution exclusively for healthcare.
• Harris provides mission critical software solutions for the Public Sector, Healthcare, Utilities and Private Sector verticals throughout North America, Europe, Asia and Australia.
• We empower our employees to make a difference.
• We have an award-winning culture.
• We offer opportunity to learn.
• We are financially strong and we are owned by the largest software company in Canada (CSI).
• We have fun!