Senior Manager, Governance, Risk, and Compliance

Position:
Senior Manager, Governance, Risk, and Compliance

Company:
Virta Health

Compensation:
Salary Range $161.5K – $209K

Location:
Remote

Employment type:
Full time

Work Arrangement:
Remote

Short Summary:
Virta Health is on a mission to reverse metabolic disease in one billion people. As the Senior Manager of GRC, you will lead the Governance, Risk, and Compliance function in a highly automated, AI-first environment, championing security compliance and risk culture across the enterprise.

Responsibilities:
- Maintain and mature Virta Health's information security compliance program, policies, procedures, and controls.
- Oversee Virta’s GRC function, scaling the platform (Vanta) to automate continuous evidence collection.
- Partner with Sales and Customer Success to navigate enterprise customer evaluations and security reviews.
- Define and own Virta's security policy lifecycle, exception management processes, and vendor risk assessments.
- Manage the administrative security queue for Virta employees and design optimized ticketing workflows.
- Collaborate with IT, Enterprise Security Engineering, and Product Development teams to ensure operational GRC policies align with technical architectures.
- Champion a culture of security awareness and design targeted training programs for employees.

Requirement:
- 7+ years of experience in Cybersecurity GRC, IT Auditing, or Information Security Compliance.
- Direct experience managing major security and healthcare frameworks (HITRUST CSF, HIPAA, SOC 2).
- Proven track record with modern SaaS GRC automation platforms (Vanta or Drata).
- Outstanding client-facing communication skills and experience partnering with Sales/CS teams.
- Ability to operate in gray areas, balancing corporate risk tolerance and regulatory requirements.

Benefits:
Information about Virta’s benefits is available on their Careers page.