Governance, Risk, and Compliance Lead (India)

What You'll Do Compliance & Governance Leadership Design, implement, and oversee comprehensive IT compliance and governance programs aligned with HIPAA , GDPR , CCPA , and other data privacy regulations. Develop and continuously refine IT security policies, standards, and procedures to balance compliance rigor with operational efficiency. Validate and approve IT processes and activities to ensure conformance with regulatory and organizational mandates. Act as the primary liaison between internal stakeholders, executive leadership, and external auditors on all compliance-related matters. Risk Management & Assessment Build and maintain a robust risk management framework to proactively identify, assess, and mitigate IT and operational risks. Conduct regular risk assessments , internal audits, and control evaluations to detect vulnerabilities and compliance gaps. Perform physical security audits and validate adherence to standards across facilities and third-party locations. Audit & Quality Assurance Manage internal and external audit processes , ensuring preparedness, accuracy, and timely resolution of findings. Conduct periodic compliance inspections across organizational and vendor sites to validate adherence to policies. Track, report, and close remediation actions while driving continuous improvement of compliance systems and procedures. Training & Advisory Design and deliver engaging compliance and security awareness training programs for employees at all levels. Serve as a trusted advisor to leadership and business units on compliance strategy, risk mitigation, and program effectiveness. Prepare comprehensive compliance reports, dashboards, and presentations for executive stakeholders and the Head of Privacy. Investigation & Remediation Lead or support internal investigations into compliance violations, data incidents, or policy breaches. Develop and implement corrective action plans to address compliance gaps and prevent recurrence. Monitor emerging risks and regulatory changes to ensure proactive compliance readiness. What You Have Required Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Risk Management , or related discipline (Master’s preferred). 2+ years of progressive experience in GRC, IT compliance, cybersecurity assurance , or related governance roles. Deep expertise in HIPAA , GDPR , CCPA , and IT risk management frameworks such as NIST , ISO 27001 , and SOC 2 . Proven experience in internal audits , risk assessments , and implementing compliance programs in complex or regulated environments. Demonstrated ability in vendor risk management , third-party audits, and compliance oversight. Strong written and verbal communication skills with the ability to simplify complex regulatory concepts for diverse audiences. Preferred Professional certifications such as: CISA (Certified Information Systems Auditor) CISM (Certified Information Security Manager) CISSP (Certified Information Systems Security Professional) ISO 27001 Lead Auditor CRISC (Certified in Risk and Information Systems Control) CHPC (Certified in Healthcare Privacy Compliance) Experience within healthcare technology , digital health , or similarly regulated industries. Proven success in building and scaling GRC programs within high-growth or global organizations. Familiarity with GRC platforms and compliance management tools. Key Competencies Strategic Leadership: Ability to architect and operationalize GRC programs that safeguard organizational integrity while enabling innovation. Analytical Rigor: Strong diagnostic and problem-solving capabilities with a methodical approach to risk analysis and control design. Ethical Judgment: Unwavering commitment to confidentiality, integrity, and ethical governance. Communication & Influence: Skilled at articulating complex compliance matters to both technical and non-technical audiences. Project Management: Adept at managing multiple concurrent initiatives with precision and accountability. Collaboration & Independence: Strong cross-functional partnership skills, equally effective when leading or working autonomously. Adaptability: Ability to stay ahead of evolving regulatory landscapes, emerging risks, and technology trends. Commure is committed to creating and fostering a diverse team. We are open to all backgrounds and levels of experience, and believe that great people can always find a place. We are committed to providing reasonable accommodations to all applicants throughout the application process. Please be aware that all official communication from us will come exclusively from email addresses ending in @ getathelas.com , @ commure.com or @ augmedix.com . Any emails from other domains are not affiliated with our organization. Employees will act in accordance with the organization’s information security policies, to include but not limited to protecting assets from unauthorized access, disclosure, modification, destruction or interference nor execute particular security processes or activities. Employees will report to the information security office any confirmed or potential events or other risks to the organization. Employees will be required to attest to these

requirements upon hire and on an annual basis.

A meeting lands on your calendar

If they’re a yes, I book the chat. You show up — that’s the whole job-hunt.