Director, Governance, Risk & Compliance (GRC)

At MTM, we are not just colleagues; we are collaborators on a shared mission; communities without barriers.

We have exciting opportunities to join our growing team where your work has a direct impact on the communities we serve.

Our company culture is one of innovation, collaboration, and growth.

If you are passionate, driven, and ready to join a team where your work will directly transform and shape our industry, then we want to talk to you!

What will your job look like?

The Director, Governance, Risk & Compliance (GRC) serves as the enterprise’s senior leader responsible for governing the compliance dimensions of modern technology and AI.

This role is a second line of defense, and provides the strategic oversight and assurance needed to ensure the organization’s technology, and AI ecosystem aligns with regulatory expectations, ethical standards, and customer commitments.

The Director, GRC owns the technology & AI compliance Framework, oversees governance for high‑risk technologies, and ensures the organization is prepared for external scrutiny, including certifications such as SOC 2, HITRUST, and FedRAMP.

This is a governance and risk leadership position, ideal for someone who understands technology deeply but operates with a compliance, assurance, and regulatory mindset.

What you’ll do:

Audit & Certification Readiness


* Lead compliance oversight for SOC 2, HITRUST, FedRAMP, and similar certifications


* Ensure first-line teams produce audit-ready artifacts


* Track remediation and risk closure

Technology & AI Governance


* Lead enterprise governance for technology and AI within the Compliance function


* Own policies, standards, and controls related to cloud, data, AI/ML/GenAI, automation, and software development


* Drive risk-tiering and governance requirements for technology and AI systems


* Ensure alignment to regulatory, ethical, and customer expectations


* Establish KRIs and KPIs for technology and AI compliance (control maturity, issues, exceptions, drift signals, audit readiness)


* Provide regular reporting to senior leadership and the AI Governance Committee


* Lead thematic reviews of technical risk trends and emerging threats

Compliance Oversight


* Ensure cloud and SaaS environments meet compliance-related controls (SOC 2, HITRUST, FedRAMP)


* Validate due diligence, technical assessments, and ongoing monitoring for technology adoption


* Ensure data governance practices incorporate compliance standards for classification, retention, quality, and access


* Support privacy with DPIAs and data-related assessments


* Deliver training on AI governance, cloud/SaaS compliance, and technology risks


* Build processes, templates, and playbooks that operationalize compliance expectations


* Serve as a strategic advisor to technology, data, and AI leaders


* Govern AI risk assessments, use-case oversight, and documentation standards


* Define ...