Aledade, Inc. · 1 month ago
Director of Security, GRC (Remote)
Aledade is seeking a Director of Governance, Risk & Compliance (GRC) to lead and scale their enterprise GRC program. The role involves building a cohesive framework for risk management and compliance while ensuring alignment with regulatory and audit expectations, and managing a growing team to drive compliance certifications and governance practices.
Health CareMedicalPrimary and Urgent CareWellness
Responsibilities
Build, lead, and continuously mature Aledade’s Governance, Risk & Compliance program
Own and maintain the enterprise risk management framework and risk registry, facilitating reviews and reporting to leadership and the Audit Committee
Lead Aledade’s compliance certification programs, including SOC 2, HIPAA, SOX/ITGC, HITRUST, and CPRA
Manage audit preparedness and execution for external assessments, ensuring evidence collection and readiness across business and technology teams
Oversee the Vanta Trust platform, including continuous control monitoring, automation of evidence gathering, and Trust Center management
Develop and enforce policies and standards, ensuring clarity, adoption, and alignment with frameworks such as NIST, ISO 27001, HIPAA, and AI RMF
Qualification
Required
10+ years of experience in Governance, Risk, and Compliance, Information Security, or related fields, with at least 5 years in leadership roles
Strong knowledge of risk management frameworks and regulatory requirements, including SOC 2, HIPAA, SOX/ITGC, HITRUST, and CPRA
Demonstrated experience preparing organizations for external audits and regulatory certifications
Hands-on experience with GRC platforms (e.g., Vanta, OneTrust, Archer, or similar)
Proven ability to design and operationalize compliance programs, policies, and evidence frameworks at scale
Excellent leadership, communication, and cross-functional collaboration skills
Preferred
CISA, CISM, CRISC, or CISSP certifications
Deep knowledge of GRC frameworks and regulations (SOC 2, HIPAA, SOX/ITGC, HITRUST, CPRA, NIST, ISO 27001)
Strong program management and audit readiness skills, including policy development, evidence collection, and external audit coordination
Skilled in leveraging GRC platforms (e.g., Vanta, OneTrust) to automate compliance and streamline controls monitoring
Proven leadership and people development abilities, with experience growing and mentoring high-performing teams
Excellent collaboration and communication skills, with the ability to influence executives, engineers, and auditors
Ability to balance compliance requirements with innovation, translating regulations into scalable, practical processes
Benefits
Flexible work schedules and the ability to work remotely are available for many roles
Health, dental and vision insurance paid up to 80% for employees, dependents and domestic partners
Robust time-off plan (21 days of PTO in your first year)
Two paid volunteer days and 11 paid holidays
12 weeks paid parental leave for all new parents
Six weeks paid sabbatical after six years of service
Educational Assistant Program and Clinical Employee Reimbursement Program
401(k) with up to 4% match
Stock options
And much more!
Company
Aledade, Inc.
Aledade is the largest network of independent primary care, enabling clinicians to deliver better patient outcomes and generate more savings revenue through value-based care.
H1B Sponsorship
Aledade, Inc. has a track record of offering H1B sponsorships. Please note that this does not
guarantee sponsorship for this specific role. Below presents additional info for your
reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (19)
2024 (11)
2023 (7)
2020 (1)
Funding
Current Stage
Late StageTotal Funding
$1.18BKey Investors
Ares Commercial FinanceLightspeed Venture PartnersOMERS Growth Equity
2025-12-01Debt Financing· $500M
2023-06-21Series F· $260M
2022-06-06Series E· $123M
Recent News
2025-12-29
Company data provided by crunchbase