# Manager, Security Governance, Risk & Compliance

**Company**: Cedar Gate Technologies, a healthcare technology business recently acquired by IQVIA
**Experience**: senior
**Job type**: full-time
**Salary**: $90,200.00 - $225,600.00
**Category**: Security
**Industry**: Healthcare

**Apply**: https://iqvia.wd1.myworkdayjobs.com/en-US/IQVIA/job/Durham-North-Carolina-United-States-of-America/Manager--Security-Governance--Risk---Compliance_R1571373?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_4203d2a4-28f

## Description

The Manager, Security Governance, Risk & Compliance is a hands-on program leadership role supporting the security governance, risk, and compliance program for Cedar Gate Technologies, a healthcare technology business recently acquired by IQVIA.

The role reports to the Associate Director responsible for Cedar Gate security and works in close partnership with that leader to run and mature a program that directly supports client trust, audit commitments, and revenue.

Cedar Gate maintains SOC 1, SOC 2, and HITRUST r2 certifications and supports a steady flow of client security reviews, questionnaires, and audit requests.

**Principal Responsibilities:**

- Partner with the Associate Director to run Cedar Gate’s security governance, risk, and compliance program, driving planning, execution, and reporting across compliance, audit, risk, and customer assurance workstreams.

- Administer annual SOC 1 and SOC 2 audits and HITRUST r2 and interim assessments, coordinating evidence requests, interviews, and walkthroughs between auditors and internal control owners, and driving gap resolution and escalations.

- Manage audit vendor relationships in partnership with the Associate Director, including vendor selection, contracts, deliverables, and payment.

- Oversee the execution and quality of recurring compliance controls performed by the Nepal operations team.

- Oversee data protection controls, including monthly data destruction sample audits, review and issuance of data destruction certificates for clients, and DLP reviews of PHI activity across AWS WorkSpaces users.

- Support client security reviews, questionnaires, and audit-related communications.

- Mature the enterprise risk program, maintaining the risk register, leading interview-based risk assessments, managing risk exceptions, and tracking treatment and remediation plans with accountable owners.

- Deliver regular risk reporting to Cedar Gate and IQVIA leadership on risk register changes, results, and trends, alongside metrics on control effectiveness and audit status.

- Lead the annual business impact analysis and maintain business continuity and disaster recovery plans.

- Develop, review, and update security policies and procedures in partnership with the Associate Director.

- Oversee third-party risk management for Tier 1 Cedar Gate vendors.

- Coordinate same-day response to significant audit findings, emerging security risks, compliance issues, and customer-driven requests across multiple stakeholders.

**Required Experience and Qualifications:**

- 5–8 years of experience in security governance, risk and compliance, IT audit, or security compliance roles.

- Hands-on experience administering SOC 1 and SOC 2 audits.

- Hands-on experience with HITRUST CSF assessments.

- Experience operating or testing IT general controls.

- Experience building or maturing an enterprise or IT risk management program.

- Experience with business impact analysis, business continuity, and disaster recovery planning.

- Experience supporting customer assurance activities.

- Experience with third-party risk management and vendor security assessments.

- Working knowledge of HIPAA/HITECH requirements and PHI handling controls.

- Experience overseeing work performed by offshore or distributed teams.

- Familiarity with cloud environments, preferably AWS.

- Strong organizational and program management skills.

## Skills

### Required
- SOC 1
- SOC 2
- HITRUST r2
- IT general controls
- Risk management
- Compliance
- HIPAA/HITECH
- Cloud environments
- AWS
- DLP
- PHI handling

### Nice to have
- CISA
- CISSP
- CRISC
- HITRUST CCSFP

---

Source: [Apply at iqvia.wd1.myworkdayjobs.com](https://iqvia.wd1.myworkdayjobs.com/en-US/IQVIA/job/Durham-North-Carolina-United-States-of-America/Manager--Security-Governance--Risk---Compliance_R1571373?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)