Director Governance, Risk & Compliance (GRC)

Director of Healthcare Governance, Risk, and Compliance

The Director of Healthcare Governance, Risk, and Compliance, reporting to the CISO, is responsible for developing, implementing, and overseeing comprehensive governance, risk management, and compliance programs within a healthcare organization. This includes establishing and maintaining frameworks that ensure adherence to federal, state, and local laws, regulations, and industry standards (e.g., HIPAA, HITECH). The director will work across different departments to integrate GRC principles into all areas of the organization, fostering a culture of patient safety, data privacy, and ethical conduct.

Key Responsibilities

• Developing and maintaining the organization's GRC framework, including policies, standards, and procedures for risk management, compliance, and information security. (e.g., NIST CSF, HITRUST).
• Providing guidance and leadership to ensure that business objectives are met within the established governance framework.
• Leading the identification, assessment, and mitigation of enterprise-wide risks, including operational, financial, reputational, legal, cybersecurity, and patient safety risks.
• Developing and implementing risk assessment methodologies, mitigation strategies, and action plans.
• Maintaining and reporting on the organization's risk register, tracking remediation activities, and providing insights to leadership.
• Conducting vendor risk assessments and ensuring third-party compliance with security and privacy standards.
• Ensuring compliance with all applicable healthcare laws, regulations, and industry standards (e.g., HIPAA, HITECH, NIST).
• Developing and delivering compliance training programs to staff and leadership to promote awareness and adherence to ethical standards.
• Overseeing internal and external audits, coordinating responses, and managing remediation efforts.
• Staying current on evolving regulatory environments, security threats, and compliance best practices, and updating policies and procedures accordingly.
• Collaborating with quality and safety teams to integrate GRC into patient care delivery, focusing on preventing avoidable harm and improving patient outcomes.
• Supporting the development and implementation of patient safety initiatives.

Preferred Qualifications

Leadership Experience

Technical & Domain Expertise

Minimum Requirements

As a health care system committed to improving the health of those we serve, we are asking our employees to model the same behaviors that we promote to our patients. As of January 1, 2012, Baylor Scott & White Health no longer hires individuals who use nicotine products. We are an equal opportunity employer committed to ensuring a diverse workforce. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law.