Senior Security Governance Risk and Compliance Analyst

6 days ago

Apply Now

Receive Emails with Similar Jobs

Alma

WebsiteLinkedInAll Job Openings

At Alma, we’re making it easier for consumers to access high-quality, affordable mental health care by supporting providers in building thriving private practices. We believe that when therapists have better resources, they’re able to provide better care to their clients. When a provider joins Alma, they gain access to a suite of tools that not only help them better run their business, but also grow it sustainably and develop as a provider. Our consumer experience is designed to empower people in their search for mental health care, offering multiple pathways and individualized support, if and when someone needs it. We’ve raised $90.5M from incredible investors like Insight Partners, Tusk, Primary, Optum Ventures, and First Round and were named one of Fast Company’s Most Innovative Companies in Health in 2020.

therapy and mental health

51 - 200 employees

📋 Description

• Alma is seeking a mission-driven Senior Security Governance Risk and Compliance (GRC) Analyst to join our team. • We are dedicated to building secure and compliant tools and services that help providers more easily manage and grow their practice. • Acting as a principal aide to the VP of Security and IT, this role will play a critical role in enabling a culture of security at Alma, making security a product differentiator that builds confidence and trust with our providers, and preparing Alma for annual audits and certifications (such as SOC 2 and HITRUST). • In this role you will perform risk assessments, create and maintain our security policies, educate our staff by developing a security awareness program, respond to security assessments, and review our vendor’s security.

🎯 Requirements

• You have 5+ years of work experience in Information Security, especially in a GRC analysis role • You have experience working in health tech or other highly regulated industries (banking, insurance, etc) • You have experience leading SOC 2 audits and/or HITRUST certifications with minimal findings • You have experience deploying GRC solutions (Drata or equivalent), putting in place a unified control framework enabling evidence collection automation and continuous compliance • You strongly understand security best practices and controls frameworks (NIST CSF, NIST 800-53, AICPA Trust Services Criteria, HITRUST CSF, PCI DSS, HIPAA Security Rule, and Breach Notification) • You have experience implementing security controls and policies that align with AWS security best practices • You have experience driving security awareness programs, including phishing simulation tools (KnowBe4 or equivalent) • You have experience performing risk assessments, with an understanding of quantitative risk analysis frameworks (FAIR) • You have experience writing customer-facing materials in partnership with product and marketing teams • You have strong written and verbal communication skills and can convey complex technical topics to non-technical stakeholders clearly and concisely • You feel a passion for Alma's mission – to improve the experience of therapy for providers and their clients and simplify access to care

🏖️ Benefits

• We’re a remote-first company • Health insurance plans through Aetna (medical and dental) and MetLife (vision), including FSA and HSA plans • 401K plan (ADP) • Monthly therapy and wellness stipends • Monthly co-working space membership stipend • Monthly work-from-home stipend • Financial wellness benefits through Northstar • Pet discount program through United Pet Care • Financial perks and rewards through BenefitHub • EAP access through Aetna • One-time home office stipend to set up your home office • Comprehensive parental leave plans • 11 paid holidays, 1 Alma Mental Health Day, and 1 Alma Volunteering Day • Flexible PTO