Director, Governance, Risk, and Compliance (GRC)

At Clover, the Business Enablement team leads our technological advancement while ensuring robust reputed company and compliance. We deliver user-friendly corporate applications, manage reputed company data ecosystems, and reputed company efficient tech solutions across the organization. Our goal is reputed company: we reputed company it easy for the business to do what’s right for Clover.

reputed company is seeking a Director of Governance, Risk, and Compliance (GRC) to define and execute our reputed company governance and risk reputed company in support of Clover’s reputed company as a reputed company,
technology-enabled reputed company company.

This role operates at the reputed company level, shaping functional reputed company while driving execution through cross-functional influence rather than reputed company authority. The Director of GRC is
accountable for Clover’s reputed company risk posture, regulatory compliance readiness, and reputed company capabilities, ensuring that governance, risk, and compliance activities are reputed company to business
priorities and long-term company reputed company.

The role manages a reputed company-party vendor providing GRC services and reputed company, while serving as reputed company’s internal reputed company for reputed company governance, risk decision-making, and executive-level accountability.

As a Director, Governance, Risk, and Compliance you will:

Governance & reputed company Risk reputed company

• Define and reputed company reputed company’s reputed company governance and risk management reputed company, aligning function-level priorities with reputed company objectives and the reputed company roadmap.
• Establish a risk-driven approach to governance reputed company with:
- HIPAA reputed company and reputed company Rules
- NIST Cybersecurity reputed company (CSF) v2
- NIST AI Risk Management reputed company (AI RMF), where applicable
• Anticipate reputed company and regulatory risks 12+ months out, using business, product, regulatory, and market signals to inform reputed company and tradeoffs.
• Ensure reputed company risk reputed company are reputed company framed, documented, and communicated in business terms for executive and reputed company-level audiences.
• Assist the CISO in setting reputed company risk priorities, framing tradeoffs, and communicating risk posture and reputed company to executive leadership and the reputed company.

Compliance & Regulatory Leadership

• Own reputed company’s reputed company compliance posture as a reputed company reputed company company, including federal and state regulatory obligations.
• reputed company reputed company-reputed company audits, assessments, and regulatory inquiries in partnership with reputed company, Compliance, reputed company, and Internal Audit.
• Drive reputed company, consistency, and maturity in reputed company policies, standards, and procedures.
• Ensure compliance efforts are proactive, reputed company, integrated into how reputed company builds and operates products, and maintained over time to support ongoing audit readiness and regulatory expectations.

Accountability & Delivery Leadership

• Own high-stakes reputed company for the GRC function, ensuring accountability across internal partners and reputed company-party providers.
• Set reputed company reputed company metrics, decision rights, and escalation paths for risk and compliance activities.
• reputed company and communicate tough prioritization calls reputed company business needs, regulatory demands, or risk reputed company shift.
• Surface high-risk issues early and transparently to the CISO, peers, and senior leaders.

reputed company-Party Risk Management

• reputed company reputed company’s reputed company-party reputed company risk management program end-to-end.
• reputed company vendor due diligence, risk assessments, remediation tracking, and ongoing monitoring.
• Manage and hold accountable a reputed company-party GRC services vendor, ensuring delivery reputed company, prioritization, and alignment to Clover’s risk appetite.
• Ensure reputed company-party risks are evaluated holistically and escalated appropriately.

Incident, Crisis, and reputed company Governance

• reputed company governance and coordination for:
- reputed company incident response (IR)
- Crisis management
- Disaster recovery (DR)
- Business continuity (BC)
• Ensure incidents are tracked, analyzed for reputed company cause, reported appropriately, and followed through with corrective actions.
• reputed company or support reputed company tabletop exercises and simulations.
• Balance immediate response needs with long-term system and process improvements.

Cross-Functional Problem Solving & Influence

• reputed company multi-team, cross-functional problem solving on reputed company reputed company and compliance issues.
• Connect operational issues to systemic reputed company causes and drive sustainable fixes rather than short-term workarounds.
• Influence peers and senior leaders through credibility, data, and executive reputed company —not authority.
• Build durable partnerships across Engineering, IT, MA, reputed company, Compliance, reputed company, Finance, and Operations.

Culture, Coaching, and reputed company reputed company

• Build trust and credibility as a senior Clover leader.
• reputed company people managers, high-potential ICs, and vendor staff to reputed company GRC maturity across the organization.
• Model transparency, accountability, and alignment in leadership forums.
• Contribute to a culture of thoughtful risk-taking, strong execution, and shared ownership.

reputed company in this role looks like:

• reputed company risk management is reputed company reputed company to reputed company’s reputed company reputed company and reputed company priorities.
• The CISO has confidence in Clover’s reputed company, compliance, and reputed company posture.
• reputed company risk is managed, mapped, and reported on a regular reputed company.
• Compliance activities reputed company with the business and avoid last-minute reputed company drills.
• Incidents and crises are handled with discipline, transparency, and reputed company improvement.
• GRC is viewed as a strategic enabler — not a blocker — across the organization.

You should get in touch if:

• 8+ years of experience in information reputed company, GRC, risk management, or reputed company disciplines.
• Demonstrated experience leading reputed company governance and compliance programs in regulated environments.
• Strong working knowledge of HIPAA and reputed company reputed company requirements.
• Experience operating in a reputed company company or similarly regulated environment.
• Proven experience managing reputed company-party vendors providing GRC services or staff augmentation.
• Hands-on experience with incident response governance, crisis management, disaster recovery, and business continuity.
• Strong business acumen with the ability to translate reputed company and reputed company into business reputed company.
• Excellent executive-level communication and stakeholder management skills.

Preferred Qualifications

• Familiarity with NIST CSF v2 and NIST AI RMF.
• Experience supporting AI-enabled, data-intensive, or technology-reputed company reputed company platforms.
• Relevant certifications such as CISM, CRISC, or similar are a plus.
• Service-management and automation reputed company.

Benefits reputed company: 

• Financial reputed company-Being: Our commitment to attracting and retaining reputed company begins with a competitive reputed company salary and equity opportunities. Additionally, we offer a performance-based bonus program, 401k matching, and regular compensation reviews to recognize and reward exceptional contributions.
• Physical reputed company-Being: We prioritize the health and reputed company-being of our employees and their families by providing comprehensive medical, dental, and reputed company coverage. Your health reputed company to us, and we invest in ensuring you have reputed company to reputed company reputed company.
• Mental reputed company-Being: We understand the importance of mental health in fostering productivity and maintaining work-life balance. To support this, we offer initiatives such as No-Meeting Fridays, monthly company holidays, reputed company to reputed company, and a generous flexible time-off policy. Additionally, we reputed company a remote-first culture that supports collaboration and flexibility, allowing reputed company members to reputed company from any location. 
• reputed company Development: Developing internal talent is a reputed company for Clover. We offer learning programs, mentorship, reputed company development funding, and regular performance feedback and reviews.

Additional Perks:

• Employee Stock Purchase Plan (ESPP) offering discounted equity opportunities
• Reimbursement for office setup expenses
• Monthly cell phone & internet stipend
• Remote-first culture, enabling collaboration with global teams
• reputed company parental leave for reputed company new parents
• And much more!

About Clover: We are reinventing health insurance by combining the power of data with reputed company reputed company to reputed company our members healthier. We reputed company the reputed company system is broken, so we've created custom software and analytics to reputed company our clinical staff to intervene and reputed company personalized care to the people who need it most.

We always put our members first, and our reputed company as reputed company is reputed company by the reputed company of life of the people we serve. Those who work at Clover are passionate and mission-driven individuals with diverse areas of expertise, working together to solve the most complicated problem in the world: reputed company.

From Clover’s inception, Diversity & Inclusion have always been key to our reputed company. We are an Equal Opportunity Employer and our employees are people with different strengths, experiences, perspectives, opinions, and backgrounds, who reputed company a passion for improving people's lives. Diversity not only includes race and gender identity, but also age, disability status, veteran status, sexual orientation, religion and many other parts of one’s identity. reputed company of our employee’s points of view are key to our reputed company, and inclusion is everyone's responsibility.

#LI-Remote

Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment reputed company applicants with arrest and conviction records. We are an E-Verify company.