Destava

Security GRC Lead

Candid Health is hiring for Security GRC Lead in San Francisco. Senior level. First seen August 26, 2026; open as of November 13, 2026. Jobs taken straight from company career pages — no aggregator in between.

Save to applyRead more and apply on Candid Health's site

With Destava: How well do you fit? · Tailor my résumé · Write a cover letter

Company
Candid Health
Where
San Francisco
Level
Senior
First seen
August 26, 2026
Listed via
Ashby

What the posting says

ROLE OVERVIEW We are seeking a Security GRC Lead to build our first in-house GRC program from the ground up. In this role, you won't just write policies or collect manual screenshots in spreadsheets; you will treat compliance as an engineering and data problem. You will build automated evidence pipelines, implement compliance-as-code, and establish continuous controls monitoring across our GCP infrastructure, identity systems, and CI/CD pipelines. You will turn point-in-time audits into a continuous compliance telemetry system that keeps our platform secure, resilient, and audit-ready at all…

Read more and apply on Candid Health's site

This page includes information from the O*NET 31.0 Database by the U.S. Department of Labor, Employment and Training Administration (USDOL/ETA). Used under the CC BY 4.0 license. O*NET® is a trademark of USDOL/ETA.