Clover Health is hiring a Director, Governance, Risk, and Compliance (GRC)

Requirements

• 8+ years of experience in information security, GRC, risk management, or related disciplines.
• Demonstrated experience leading security governance and compliance programs in regulated environments.
• Strong working knowledge of HIPAA and healthcare security requirements.
• Experience operating in a public company or similarly regulated environment.
• Proven experience managing third-party vendors providing GRC services or staff augmentation.
• Hands-on experience with incident response governance, crisis management, disaster recovery, and business continuity.
• Strong business acumen with the ability to translate security and compliance risks into business impact.
• Excellent executive-level communication and stakeholder management skills.

Nice to Have

• Familiarity with NIST CSF v2 and NIST AI RMF.
• Experience supporting AI-enabled, data-intensive, or technology-forward healthcare platforms.
• Relevant certifications such as CISM, CRISC, or similar are a plus.
• Service-management and automation mindset.