Senior Security Engineer, Aledade
Governance, Risk, and Compliance
+ Stock options
Primary care centers and services
Be an early applicant
Primary care centers and services
1001+ employees
Be an early applicant
+ Stock options
1001+ employees
Company mission
To create a better health care system for patients, for doctors and for society.
Role
Who you are
- Bachelor (or higher) in Computer Science, Information Technology, Cybersecurity or a related field, 6 years security domain experience without degree
- 4+ years combined experience as a GRC specialist in an enterprise environment (preferably cloud) across multiple disciplines
- 3+ years of relevant work experience in risk reporting, developing & collecting metrics, and working on audits/assessments
- 2+ years of experience in performing third party risk management activities
Desirable
- Security specific and/or related certifications (e.g. CISSP, CISA, CRISC, CDPSE, CIPP, GIAC, AWS certifications)
- Knowledge of security frameworks, controls, regulations and industry best practices (e.g. NIST, ISO, SOX ITGC, HIPAA, HICP, CCPA/CPRA)
- Experience in participating in and leading security GRC projects for a dynamic organization with demonstrated project management skills and driving accountability for meeting deliverables within established timelines
- Significant familiarity with metrics (e.g. KRI, KPI, OKR) to measure security team service and program effectiveness & consistency
- Experience implementing, refining and managing the utilization of GRC solutions and related technology tools/software
- Knowledge & experience in risk quantification (e.g. FAIR) and associated reporting
- Solid understanding of enterprise security technology, appliances, and tools
- Experience with health-tech systems, like Electronic Health Records, Clinical data, etc
- Knowledge of security technology and relevant security risks, controls, and vulnerabilities
- Collaborative work style, ability to develop and maintain effective working relationships both
- Internal and external to the organization
- Experience facilitating meetings with high level, cross-functional teams
- Exceptional verbal, written and interpersonal communication skills
What the job involves
- As a Senior Security Engineer I at Aledade, you play a central role in helping secure our enterprise, cloud native environments, and applications. We’re looking for a security GRC engineer that understands that governance, risk, compliance, privacy, data protection, industry frameworks & best practices, and regulatory requirements are important ingredients to our mission
- Beyond GRC and technical expertise, your efforts will support protecting patients, our employees, and Aledade as a whole. Our technology saves lives and improves the mental and physical health for millions of people. At Aledade, we empower primary care physicians with technology to keep their patients healthy, preventing unnecessary hospitalizations
- Working cross-functionally to measure & report on risk, achieve & maintain compliance, manage assessments/audits, and contribute to security GRC strategy & advisory efforts
- Leveraging data to understand trends, metrics, and opportunities to improve our security posture and then helping execute on those opportunities with stakeholders
- Leading and enhancing risk management efforts, spearheading qualitative risk assessments & quantitative risk analysis, responsible for third party risk management (TPRM), participate in Customer Trust and involved in mitigation strategies in a cross-functional environment to ensure effective resolution and remediation of security risks / issues
- Helping craft and refine security documentation pertinent to our Security Program, such as policies, standards, baselines, and standard operating procedures
Our take
The US primary care system suffers from a 'chronic lack of adequate support'. Aledade is a company set out to improve this by assisting independent physician practices from reducing costs to data integration support.
The company prides itself on stats of 1.7 million patients across 37+ states since its founding in 2014. A recent acquisition of Curia, (a leader in value-based care analytics using practical applications of AI to optimize the targeting of patient care and engagement programs) is also bringing the company to the modern world, enhancing its data understanding capabilities and challenging others in its sector with this advancement.
Aledade has won several awards over the years and is now considered the largest network of independent primary care in the country. Alongside this, the company is valued in the billions of dollars with many successful funding rounds. With the company consistently expanding and enhancing its technology it has become a pillar in the industry and therefore a very exciting company to keep an eye on.
Freddie
Company Specialist at Welcome to the Jungle
Insights
Few candidates hear
back within 2 weeks
Company
Funding (last 2 of 10 rounds)
Jun 2023
$260m
SERIES F
Jun 2022
$123m
SERIES E
Total funding: $680.6m
Company benefits
- Flexible work schedule and the ability to work remotely
- 12 weeks paid Parental Leave for all new parents
- Robust time off plan (21 days of PTO in your first year!)
- Employees receive a 6-week fully paid sabbatical upon completion of each six-year period of continuous employment
- Generous Nationwide PPO Medical, Dental and Vision Plans
- 401(k) with up to 4% match
- Company stock options
- 168 PTO hours in your first year
- 12 weeks paid parental leave for all new parents
- Slack channels for personal interests, fantasy football leagues, and much more
- Board games to encourage camaraderie between colleagues at HQ
- In-person and virtual retreats and gatherings
- Educational assistance programs
- Manager-focused training curriculum
- LinkedIn Learning
Company HQ
Bethesda, MD
Articles
Leadership
Farzad Mostashari
(CEO)A large background in the healthcare sector previously worked as National Coordinator for Health Information Technology at the US Department of Health and Human Services.
Matt Kendall
(President)Previously worked as the Director of the Office of Provider Adoption Support at the Office of the National Coordinator for Health Information Technology alongside other roles in management and operations in the healthcare sector.
Share this job
View 22 more jobs at Aledade