Lead Governance, Risk and Compliance Manager

The posting, as Cohere Health wrote it

Opportunity Overview

We’re looking for an experienced Lead Governance, Risk and Compliance (GRC) Manager to lead and mature our enterprise security governance, risk management, regulatory compliance, and customer assurance programs. In this role, you will drive operational excellence across compliance frameworks, security risk management, third-party assurance, and customer-facing security initiatives while strengthening the processes and technology that support our growing business.

This is a hands-on leadership role suited for an experienced GRC professional who can independently manage complex initiatives, influence cross-functional stakeholders, and build scalable, repeatable operations. You’ll work closely with Security, Engineering, IT, Legal, Sales, Customer Success, and executive leadership to advance our security posture, accelerate customer trust, and enable business growth.

What you’ll do

• Lead and mature Cohere’s GRC program, establishing scalable governance processes, operating procedures, risk management practices, and measurable performance indicators aligned with business objectives.
• Own the deployment, configuration, and optimization of enterprise GRC platforms, including control mapping, evidence automation, risk registers, continuous monitoring, and compliance reporting.
• Direct compliance and certification initiatives across HITRUST, HIPAA, ISO 27001, and applicable regulatory requirements, ensuring ongoing audit readiness and effective control execution.
• Lead customer security assurance activities, including security questionnaires, due diligence requests, customer audits, executive briefings, and security discussions with prospective and existing clients.
• Partner with Sales, Customer Success, and Marketing to develop security-focused go-to-market materials, establish and maintain a customer-facing Trust Center, and strengthen security as a competitive differentiator.
• Review and negotiate security-related contractual requirements in partnership with Legal, including Data Protection Agreements (DPAs), Business Associate Agreements (BAAs), security exhibits, and customer security obligations.
• Oversee enterprise risk management activities, including risk assessments, remediation tracking, exception management, and the enforcement and reporting of vulnerability remediation SLAs across Engineering, Platform, DevOps, and Data teams.
• Govern identity and access compliance, including periodic access reviews, privileged access certifications, segregation of duties, and remediation of access control deficiencies.
• Establish and maintain cross-functional GRC engagement with business units to align security policies, controls, risk ownership, and compliance obligations with operational priorities.
• Develop and deliver executive-level presentations, dashboards, and reporting that communicate compliance posture, risk exposure, remediation performance, customer assurance metrics, and program maturity.
• Bu

[…]
e Health:

Cohere Health’s clinical intelligence platform and agentic AI-powered solutions connect health plans’ strategic goals and providers’ needs, optimizing the speed, cost, and quality of care. With an enterprise approach that streamlines payer-provider decision-making across the care continuum–including policy, prior authorization, payment accuracy, and more–the company improves collaboration and reduces burden, resulting in up to 8x ROI and 94% provider satisfaction.

With the acquisition of ZignaAI, we’ve further enhanced our platform by launching our Payment Integrity Suite, anchored by Cohere Validate™, an AI-driven clinical and coding validation solution that operates in near real-time. By unifying pre-service authorization data with post-service claims validation, we’re creating a transparent healthcare ecosystem that reduces waste, improves payer-provider collaboration and patient outcomes, and ensures providers are paid promptly and accurately.

Cohere Health’s innovations continue to receive industry wide recognition. We’ve been named to the 2025 Inc. 5000 list and in the Gartner® Hype Cycle™ for U.S. Healthcare Payers (2022-2025), and ranked as a Top 5 LinkedIn™ Startup for 2023 & 2024. Backed by leading investors such as Deerfield Management, Define Ventures, Flare Capital Partners, Longitude Capital, and Polaris Partners.

The Coherenauts, as we call ourselves, who succeed here are empathetic teammates who are candid, kind, caring, and embody our core values and principles . We believe that diverse, inclusive teams make the most impactful work. Cohere is deeply invested in ensuring that we have a supportive, growth-oriented environment that works for everyone.

We can’t wait to learn more about you and meet you at Cohere Health!

Equal Opportunity Statement

Cohere Health is an Equal Opportunity Employer. We are committed to fostering an environment of mutual respect where equal employment opportunities are available to all. To us, it’s personal.