Jobs › Health Care Service Corporation

Executive Director, Governance Risk & Compliance

Health Care Service Corporation · Chicago, IL · $177,500–$329,800 a year · Full time

Posted Sep 10, 2026 · We last checked this listing on Oct 6, 2026

Apply at Health Care Service Corporation

Likely interview questions for this role

Written from this job description, not a generic list. Each one notes what the interviewer is really checking.

About your past

Tell me about a time you inherited a GRC program that was mostly paperwork. What did you change?

What they are checking: Whether they can turn compliance activity into real risk reduction.

Tell me about a disagreement with Legal or Compliance over a risk decision. How did you resolve it?

What they are checking: Cross-functional alignment at the executive level, which the posting emphasizes.

What would you do

A business leader asks for a security policy exception for a critical launch. How do you decide?

What they are checking: Judgment on exceptions, compensating controls and time limits rather than automatic yes or no.

How do you keep threat and vulnerability management aligned with risk policy when remediation teams are overloaded?

What they are checking: Prioritization based on risk and the ability to hold teams to standards fairly.

How do you manage GRC across subsidiaries that run different systems and cultures?

What they are checking: Ability to apply consistent standards across the company and its subsidiaries.

How do you decide where to spend a limited GRC budget?

What they are checking: Budget stewardship and the ability to tie spending to the biggest risks.

About the work

You will lead SOX, HIPAA and HITRUST attestations. How would you build one GRC framework that serves all three without duplicating work?

What they are checking: Ability to map controls once and test once, which saves effort and keeps evidence consistent.

How do you report security risk to the C-suite and the Board in a way that drives decisions?

What they are checking: Executive risk communication that ties technical findings to business impact and appetite.

How would you strengthen third party risk management for hundreds of vendors with access to member data?

What they are checking: Practical tiering, assessment and monitoring of vendors at enterprise scale.

How do you measure whether security awareness initiatives are working?

What they are checking: Focus on behavior change and outcomes rather than training completion rates.

Practice this interview out loud.

Offer builds a real interview for this exact role at Health Care Service Corporation from your resume and this job description, asks the questions one at a time, and tells you what landed. The first one is free.

Practice this out loud

The full job description

As published by Health Care Service Corporation.

At HCSC, our employees are the cornerstone of our business and the foundation to our success. We empower employees with curated development plans that foster growth and promote rewarding, fulfilling careers. Join HCSC and be part of a purpose-driven company that will invest in your professional development. Job Summary This position provides enterprise leadership for security risk and compliance by setting strategy, owning GRC outcomes, and ensuring regulatory alignment across the company and its subsidiaries. The Executive Director builds and sustains the enterprise GRC framework and leads all enterprise attestations and certifications, including SOX, HIPAA, and HITRUST, supported by clear C suite and Board reporting. The role governs security policy, exceptions, security awareness initiatives, and third party risk management, while enabling consistent identification, tracking, remediation, and reporting of security risks across the enterprise. Responsibilities also include overseeing processes for threat and vulnerability management, ensuring adherence to established risk policies and standards, and continuously improving security risk management capabilities and controls. The Executive Director owns the enterprise information security risk posture, budget stewardship, and cross functional alignment with Legal, Compliance, IT, and Business stakeholders Required Job Qualifications: • Bachelor’s degree and 15 years of experience in IT/Information Security; or 19 years of experience without a degree. • Minimum 7 years of people leadership experience (multi‑team leadership preferred). • Proven experience leading enterprise GRC programs (risk, compliance, policy, third‑party risk, subsidiary governance). • Demonstrated success briefing executives/Board, owning budgets, and driving cross‑functional outcomes. Preferred Job Qualifications: Executive experience with regulatory regimes (e.g., HIPAA/HITRUST, SOX) and enterprise control frameworks (NIST CSF/800‑53, ISO 27001). Are you being referred to one of our roles? If so, ask your connection at HCSC about our Employee Referral process! Pay Transparency Statement: At Health Care Service Corporation, you will be part of an organization committed to offering meaningful benefits to our employees to support their life outside of work. From health and wellness benefits, 401(k) savings plan, pension plan, paid time off, paid parental leave, disability insurance, supplemental life insurance, employee assistance program, paid holidays, tuition reimbursement, plus other incentives, we offer a robust total rewards package for employees. Learn more about our benefit offerings by visiting https://careers.hcsc.com/totalrewards . The compensation offered will vary depending on your job-related skills, education, knowledge, and experience. This role aligns with an annual incentive bonus plan subject to the terms and the conditions of the plan. HCSC Employment Statement: We are an Equal Opportunity Employment employer dedicated to providing a welcoming environment where the unique differences of our employees are respected and valued. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other legally protected characteristics. Base Pay Range $177,500.00 - $329,800.00 Exact compensation may vary based on skills, experience, and location.

Apply at Health Care Service Corporation