Director, Governance, Risk, and Compliance (GRC)

At Clover, the Business Enablement team leads our technological advancement while ensuring robust security and compliance. We deliver user-friendly corporate applications, manage complex data ecosystems, and provide efficient tech solutions across the organization. Our goal is simple: we make it easy for the business to do what’s right for Clover. Clover Health is seeking a Director of Governance, Risk, and Compliance (GRC) to define and execute our security governance and risk strategy in support of Clover’s growth as a public, technology-enabled healthcare company. This role operates at the enterprise level, shaping functional strategy while driving execution through cross-functional influence rather than direct authority. The Director of GRC is accountable for Clover’s security risk posture, regulatory compliance readiness, and resilience capabilities, ensuring that governance, risk, and compliance activities are aligned to business priorities and long-term company outcomes. The role manages a third-party vendor providing GRC services and staffing, while serving as Clover Health’s internal owner for security governance, risk decision-making, and executive-level accountability. As a Director, Governance, Risk, and Compliance strong you will: Governance and Security Risk Strategy span • Define and evolve Clover Health’s security governance and risk management strategy, aligning function-level priorities with enterprise objectives and the security roadmap. span • Establish a risk-driven approach to governance aligned with: span - HIPAA Security and Privacy Rules span - NIST Cybersecurity Framework (CSF) v2 span - NIST AI Risk Management Framework (AI RMF), where applicable span • Anticipate security and regulatory risks 12+ months out, using business, product, regulatory, and market signals to inform strategy and tradeoffs. span • Ensure security risk decisions are clearly framed, documented, and communicated in business terms for executive and board-level audiences. span • Assist the CISO in setting security risk priorities, framing tradeoffs, and communicating risk posture and progress to executive leadership and the Board. Compliance and Regulatory Leadership span • Own Clover Health’s security compliance posture as a public healthcare company, including federal and state regulatory obligations. span • Lead security-related audits, assessments, and regulatory inquiries in partnership with Legal, Compliance, Privacy, and Internal Audit. span • Drive