REMOTE Director of Cybersecurity- GRC

Director Of Cybersecurity Governance, Risk & Compliance Required Skills & Experience: 8+ years of experience in healthcare, banking, defense, or another highly regulated/high-security environment. 5+ years of progressive cybersecurity leadership experience with ownership of GRC programs. Strong Governance, Risk & Compliance (GRC) background. Experience building, maturing, or transforming cybersecurity governance programs. Strong cybersecurity governance, risk management, policy development, and regulatory compliance expertise. Experience conducting security risk assessments and managing enterprise risk registers. Ability to communicate cybersecurity risk and strategy to executive leadership. Experience leading teams and influencing stakeholders across the organization. Working knowledge of cybersecurity frameworks such as NIST CSF, ISO 27001, COBIT, NIST 800-171, HIPAA, and related regulations. CISSP or CISM certification required. Nice to Have Skills & Experience: Healthcare industry experience. Experience conducting HIPAA Security Risk Analyses. Experience with CMMC or NIST 800-171 compliance programs. Third-party/vendor cybersecurity risk management experience. Experience developing cybersecurity awareness programs. HCISPP, CRISC, CISA, or other healthcare GRC certifications. Experience supporting clinical, research, or academic environments. Job Description: Insight Global is seeking a Director of Cybersecurity Governance, Risk & Compliance for a leading healthcare and academic organization. This leader will be responsible for building and advancing the organization's cybersecurity governance, risk, and compliance function while supporting a complex clinical, research, and academic environment. The ideal candidate brings a balance of executive-level cybersecurity leadership and deep GRC expertise, with experience assessing risk, developing policies, driving compliance initiatives, and improving overall security maturity. This is not a hands-on security operations role. Instead, the focus is on cybersecurity governance, risk assessments, compliance strategy, vendor risk management, policy development, incident response coordination, and executive communication. The successful candidate will play a critical role in shaping cybersecurity strategy as the organization continues its growth toward future hospital operations while leading teams, influencing stakeholders, and ensuring alignment with healthcare regulatory requirements and industry security frameworks. Day-to-Day: Lead and execute the enterprise cybersecurity GRC strategy for Dell Medical School. Build and mentor a team of GRC analysts and compliance professionals. Conduct security risk assessments and manage remediation initiatives across the organization. Lead annual HIPAA Security Risk Analyses and compliance efforts. Develop and maintain cybersecurity policies, standards, and procedures. Own vendor and third-party security risk assessments and onboarding approvals. Present risk posture, compliance status, and strategic recommendations to executive leadership. Lead incident response coordination for major security events beyond enterprise response capabilities. Develop business continuity and disaster recovery strategies. Oversee cybersecurity governance for research environments, application security, and cloud security programs.