Grc Manager

Elation Health is a leading cloud based electronic health records platform for independent primary care physicians and healthcare innovators looking to transition the primary care from fee based to value based model. We are building a primary care operating system that puts physicians first and in the driver's seat to have a trusted relationship with their patients. We have enjoyed considerable growth, and are now looking for a GRC Manager to join our team.

As GRC Manager, you will unlock for our teams, from Sales to R&D to Customers, the ability to work fast and with confidence with your partnership as a subject matter expert and experience in compliance and controls frameworks.  

You will be responsible for deploying and operationalizing our compliance programs, building and maintaining policies, procedures, training, communications, and controls. This role will execute the monitoring programs and will drive and formally document all monitoring and monitoring test work performed.

Responsibilities:

• Deploys, operationalizes and manages Elation's compliance program, including coordinating with privacy, security, and other applicable stakeholders.  Performs day-to-day management of this program.
• Coordinates with appropriate stakeholders to maintain and revise policies and procedures as necessary  
• Ensures proper controls are in place for a coordinated security and compliance posture across a variety of functional organizations and their policies.
• Strong collaboration with internal and external stakeholders regarding compliance related topics. Working closely with Product, Engineering, IT, Security, and Customer organizations to ensure effective incorporation of compliance requirements. 
• Monitors the performance of the compliance program  on a continuing basis, taking appropriate steps to improve its effectiveness.
• Supporting regular compliance monitoring activities by performing or directing internal audits to ensure company-wide compliance with internal and external compliance requirements.
• Rolls out and maintains training and education for risk and compliance across the organization.
• Develops and maintains Elation's security and compliance policy for dissemination to   customers and prospects
• Manages and coordinates external vendor compliance review process

Requirements:

• Bachelor's Degree or equivalent combination of relevant education and experience 
• 5 years minimum experience in GRC, compliance or relevant industry.
• Prior experience planning and leading external audits
• Track and remediate gaps to completion
• Knowledge and understanding of information risk/security principles and related industry standards, such as NIST, PCI, ISO 27001, and HIPAA/HITECH
• Bonus points for experience working with regulations pertaining to healthcare and healthcare IT compliance (21st Century Cures, CEHRT,  Ryan Haight Act, etc.), international and local privacy regulations including GDPR and CCPA.
• Strong oral and written communication skills, with ability to bring clarity to complex needs and requirements
• Ability to effectively prioritize to support near term execution while balancing the long-term growth of the company

Salary: $130,000 - $155,000 USD

Elation welcomes individuals from all backgrounds and walks of life. Elation is proud to be an Equal Opportunity Employer and is dedicated to creating and maintaining a diverse and inclusive work environment.

We are committed to equal opportunity for all employees and applicants, and value individuals with diverse perspectives including, but not limited to: race, color, religion, sex, sexual orientation, socioeconomic status, age, gender identity or gender expression, national origin, disability or veteran status.

Elation also complies with all applicable national, state and local laws governing nondiscrimination in employment as well as work authorization and employment eligibility verification requirements of the Immigration and Nationality Act and IRCA. We firmly believe a strong culture that supports a diverse and inclusive workforce allows us to achieve Elation's mission of helping independent primary care thrive.

As a healthcare technology company whose mission is to support IPCPs and frontline healthcare workers, and as a tight-knit company where we have the utmost concern and care for our team members, Elation Health has adopted a Mandatory COVID-19 Vaccination Policy. 

This policy will comply with all applicable laws and is based on guidance from the Centers for Disease Control and Prevention and local health authorities.

We will not require any candidates to be vaccinated in order to interview for our open positions, but all new hires at Elation will be required to share a copy of their vaccination certification or present documentation to request an exemption. 

In compliance with the EEOC, any team member in need of an exemption from this policy due to a medical reason, or because of a sincerely held religious belief must provide People Ops (hr@elationhealth.com) with appropriate documentation. For a medical exemption, we require a doctor's note, and for a religious exemption, we require a note from the team member outlining the request.