InfoSec GRC Career Path

I currently work as an InfoSec GRC Analyst in the Healthcare division of a company and I'm trying to find out where I can move up from here. I want to stay in the GRC area, IT, InfoSec, and preferably even Healthcare (it's a lot of specific knowledge I don't want to just throw away). What would be a plausible career path from here? I assume a Sr. position and then would it just be a compliance manager? I don't have a lot of guidance from higher up. Any suggestions on certs I should have in this career and moving forward? I have my BS in IT and working on my MS in Computer Info Systems Security. Thanks!