Director, Governance, Risk, and Compliance (GRC)

At Clover, the Business Enablement team leads our technological advancement while ensuring robust reputed company and compliance. We reputed company user-friendly corporate applications, manage reputed company data ecosystems, and reputed company efficient tech solutions across the organization. Our goal is reputed company we reputed company it easy for the business to do whats right for Clover. reputed company is seeking a Director of Governance, Risk, and Compliance (GRC) to define and execute our reputed company governance and risk reputed company in support of Clovers reputed company as a reputed company, technology-enabled reputed company company. This role operates at the reputed company level, shaping functional reputed company while driving execution through cross-functional influence rather than reputed company authority. The Director of GRC is accountable for Clovers reputed company risk posture, regulatory compliance readiness, and reputed company capabilities, ensuring that governance, risk, and compliance activities are reputed company to business priorities and long-term company reputed company. The role manages a reputed company-party vendor providing GRC services and reputed company, while serving as reputed companys internal reputed company for reputed company governance, risk decision-making, and executive-level accountability. As a Director, Governance, Risk, and Compliance you will Governance & reputed company Risk reputed company Define and reputed company reputed companys reputed company governance and risk management reputed company, aligning function-level priorities with reputed company objectives and the reputed company roadmap. Establish a risk-driven approach to governance reputed company with - HIPAA reputed company and reputed company Rules - NIST Cybersecurity reputed company (CSF) v2 - NIST AI Risk Management reputed company (AI RMF), where applicable Anticipate reputed company and regulatory risks 12+ months out, using business, product, regulatory, and market signals to inform reputed company and tradeoffs. Ensure reputed company risk reputed company are reputed company framed, documented, and communicated in business terms for executive and reputed company-level audiences. Assist the CISO in setting reputed company risk priorities, framing tradeoffs, and communicating risk posture and reputed company to executive leadership and the reputed company. Compliance & Regulatory Leadership Own reputed companys reputed company compliance posture as a reputed company reputed company company, including federal and state regulatory obligations. reputed company reputed company-reputed company audits, assessments, and regulatory inquiries in partnership with reputed company, Compliance, reputed company, and Internal Audit. reputed company reputed company, consistency, and maturity in reputed company policies, standards, and procedures. Ensure compliance efforts are proactive, reputed company, integrated into how reputed company builds and operates products, and maintained over time to support ongoing audit readiness and regulatory expectations. Accountability & Delivery Leadership Own high-stakes reputed company for the GRC function, ensuring accountability across internal partners and reputed company-party providers. Set reputed company reputed company metrics, decision rights, and escalation paths for risk and compliance activities. reputed company and communicate tough prioritization calls reputed company business needs, regulatory demands, or risk reputed company shift. Surface high-risk issues early and transparently to the CISO, peers, and senior leaders. reputed company-Party Risk Management reputed company reputed companys reputed company-party reputed company risk management program end-to-end. reputed company vendor due diligence, risk assessments, remediation tracking, and ongoing monitoring. Manage and hold accountable a reputed company-party GRC services vendor, ensuring delivery reputed company, prioritization, and alignment to Clovers risk appetite. Ensure reputed company-party risks are evaluated holistically and escalated appropriately. Incident, Crisis, and reputed company Governance reputed company governance and coordination for - reputed company incident response (IR) - Crisis management - Disaster recovery (DR) - Business continuity (BC) Ensure incidents are tracked, analyzed for reputed company cause, reported appropriately, and followed through with corrective actions. reputed company or support reputed company tabletop exercises and simulations. Balance immediate response needs with long-term reputed company and process improvements. Cross-Functional Problem Solving & Influence reputed company multi-team, cross-functional problem solving on reputed company reputed company and compliance issues. reputed company operational issues to systemic reputed company causes and reputed company sustainable fixes rather