Impact starts with you.

I’m looking for a job I’m looking to hire
Job · Cary, NC · Full time

Senior IT GRC Advisor

Community Care of North Carolina · Health Care · $279.6M budget · 556 staff · Since 2013

Why Community Care of North Carolina

FY2024 · Form 990Its mission and biggest programs, as filed

Improves healthcare quality, access, and efficiency for vulnerable populations by using data analytics to support community-based primary care providers and advance health equity.

  • Population health and other clinical programs: this area is responsible for the development and implementation of Care management services and provider services that improve health outcomes and provide value to stakeholders. Population health programs deploy efficient Care management services to…$229.2M spent in FY2024
  • Data analytics: ccnc integrates data from multiple sources including payers and providers and uses the data to improve health outcomes and lower costs for its attributed populations. Tools and visualizations are created at the practice and group level in order…$12.7M spent in FY2024

Before you apply

FY2023 · Form 990Independent: from IRS data, not the org
Last advisory board member made
$537,109
Form 990, 2024
Fine: from the org's Form 990.
Pt VII · Sec A
Pays its leaders
$308K–$677K
12 officers reported
Fine: from the org's Form 990.
Pt VII · Sec A
Budget
$203.6M
spent in FY2023
Fine: from the org's Form 990.
Pt I · Ln 18
Staff
556
employees
15 volunteers
Fine: from the org's Form 990.
Pt I · Ln 5–6
Spent on programs
91%
of spending
Looks good: 91% of spending went to programs; 75% or more.
Pt IX · Ln 25 · col B
Surplus or deficit
+13%
of revenue, FY2023
Looks good: revenue was at least expenses in the latest filing.
Pt I · Ln 19
Cash reserves
5 mo
of spending, in cash and securities
Looks good: 4.9 months of spending in cash; 3 or more.
Pt X · Ln 1–2 · Pt I · Ln 18
Latest return
FY2023
latest Form 990
Fine: the latest return is for FY2023, 3 tax years back; within 3 tax years.
IRS e-file
IRS status
501(c)(3)
tax-exempt since 2015
Looks good: listed by the IRS.
IRS BMF
Looks goodFineWorth a lookConcernTap a box for the reason.

About the role

The org's own posting, as written

About CCNC: From the mountains to the coast, from large cities to small towns, Community Care of North Carolina is transforming health care. Informed by statewide data and predictive analytics, community-based care-managers work with local physicians and diverse teams of health professionals to develop whole-person plans of care that connect people to the right local resources and increase equity and access to high quality care. CCNC Mission Statement To improve the health and quality of life for all North Carolinians by building supporting better community-based healthcare delivery systems.

Position Summary

The Senior IT GRC Advisor is responsible for leading and maturing CCNC's enterprise IT governance, risk, and compliance program. This role serves as a senior advisor to leadership and works in alignment with IT security and IT leadership on IT risk, cybersecurity governance, internal controls, regulatory obligations, and audit readiness, while maintaining practical, business-aligned processes that strengthen the control environment across infrastructure, applications, cloud platforms, vendors, data protection, and strategic technology initiatives.

The Senior IT GRC Advisor is accountable for the development, implementation, and continuous improvement of IT GRC methodologies, policies, standards, risk assessments, issue management, reporting, and advisory services that support secure and compliant operations.

Essential Functions

Lead the enterprise IT GRC program, including governance structures, risk management processes, policy oversight, control framework alignment, and reporting on program effectiveness to leadership. De monstrate strong critical thinking and professional skepticism to assess control design and operating effectiveness, analyze requirements, data, and processes in context, and provide defensible, risk-based recommendations to management. Plan, lead, and execute IT risk assessments, audits, and advisory engagements across infrastructure, applications, cloud services, cybersecurity processes, data protection controls, and enterprise technology initiatives.

Develop, maintain, and mature the IT risk register and issue management process, including documenting risks, assigning ownership, tracking remediation plans, validating closure, and reporting residual risk and trends to leadership. Establish and maintain GRC metrics, dashboards, KPIs, and KRIs to provide leadership with meaningful visibility into control effectiveness, audit readiness, remediation status, and emerging risk trends. Collaborate with IT, Security, Privacy, Legal, Compliance, Internal Audit, and business stakeholders to strengthen internal controls and implement sustainable corrective and preventive actions.

Advise on large-scale enterprise projects, system implementations, and technology changes by embedding risk, compliance, control, and governance requirements throughout the project and system lifecycle. Lead third-party and vendor risk management…

Read the full posting

About Community Care of North Carolina

From its Form 990

More like this