← All roles

Senior Manager, GRC

Maven Clinic· Information Technology
Apply on company site
Hybrid (New York, NY)$170k - $201kfull-timePosted 1mo ago

About the role

GRC Manager responsible for governance, risk, and compliance for Maven Clinic’s B2B health benefits platform. Leads GRC function, partners across Engineering, IT, HR, Legal, Sales, and Customer Success; manages audits, policy writing, RFIs, and control monitoring; reports to the CISO/Head of Security.

Responsibilities

  • Own continuation and renewal of SOC 2 (Type II) and HITRUST certifications end-to-end.
  • Lead the establishment of ISO 27001 and ISO 42001 certification programs, including gap assessments, control mapping, policies, and audit readiness.
  • Manage annual/ongoing audit calendar across frameworks, coordinating with Engineering, IT, HR, Legal to gather evidence and close findings on time.
  • Track regulatory and framework changes (HIPAA, state privacy laws, ISO updates) and translate them into control updates.
  • Serve as primary owner of security questionnaires and RFIs/RFPs for Sales and Customer Success; ensure accurate, timely responses.
  • Maintain a security knowledge base/answer library.
  • Partner with Sales Engineering and Account teams to represent security posture in customer calls; join calls as needed when security is a blocker.
  • Manage relationships with customers' security/compliance teams during onboarding and renewal cycles.
  • Build and run an internal audit/control-monitoring program to verify external controls operate day-to-day.
  • Flag control gaps or process drift to CISO/Head of Security; expand internal audit scope over time (policy adherence, vendor risk, operational risk).

Qualifications

  • 6+ years of experience in GRC, information security compliance, or IT audit with direct ownership of at least one SOC 2 or similar audit cycle from start to finish.
  • Working knowledge of SOC 2, HITRUST, and ISO 27001 frameworks hands-on.
  • Experience responding to customer security questionnaires/RFIs, ideally in a B2B SaaS or healthcare-adjacent environment.
  • Strong cross-team collaboration skills (Engineering, IT, HR, Legal, Sales).
  • Solid project management instincts: sequencing overlapping audits/certifications, tracking dependencies and remediation, meeting deadlines.
  • Strong written communication for policies, RFI responses, and audit narratives.

Skills

Required:SOC 2 (Type II) complianceHITRUSTISO 27001 / ISO 42001Security questionnaires / RFIs

Benefits

  • Maven for Mavens: access to the full platform and specialists.
  • Wellness partnerships and whole-self care.
  • Hybrid work with in-office meals and Work Together Days.
  • 16 weeks of parental leave with new parent stipend (1 year+ tenure).
  • Annual professional development stipend and access to a personal career coach.
  • 401K matching for US-based employees with immediate vesting.
Last updated Sep 9, 2026. Interested? Apply on the company site.

About Maven Clinic

The next generation of care for women and families

Maven helps companies retain talent, improve health outcomes, and reduce maternity and fertility costs. We support every path to parenthood: Pregnancy, Fertility, Egg Freezing, Adoption, Surrogacy, Infant Care, Breastmilk Shipping, and Manager Training.

Women's healthFamily healthVirtual careFertilityPregnancyInfertilityParentingMenopause
Company profileWebsite

More open roles at Maven Clinic