Senior Security & Compliance Analyst, Headspace Health
$122.4-195.5k
+ Equity
More information about location
Office located in Santa Monica, CA
Mental health and wellbeing platform
Open for applications
Mental health and wellbeing platform
1001+ employees
Open for applications
$122.4-195.5k
+ Equity
More information about location
Office located in Santa Monica, CA
1001+ employees
Company mission
To provide every person access to lifelong mental health support.
Role
Who you are
- Education Requirements: Bachelor’s degree or foreign equivalent in Computer Engineering, Management Information Systems, Cybersecurity or related field
- Experience Requirements: Two (2) years of experience in the position offered, as a Security Analyst or related occupation
- Must have experience with the following: industry security compliance frameworks and regulations (ISO 27001/2, PCI-DSS, HIPAA, GDPR, FedRAMP, HITRUST, SOC 1, SOC 2, and international privacy requirements; cloud security concepts (DevSecOps, Infrastructure as Code (IaC), Continuous Integration/Continuous Deployment (CI/CD), Static Application Security Testing (SAST), and Dynamic Application Security Testing (DAST)); agile secure software development lifecycle and distinguishing core inputs and outputs in each cycle; security engineering practices (incident response, anti-malware solutions, threat detection, and vulnerability management); assessing and managing risks associated with third-party vendors and partners handling PII/PHI; developing and delivering security awareness training, emphasizing compliance and best practices in handling sensitive client information
What the job involves
- Interact closely with other cyber security architects, privacy officer, general counsel, engineering, and product management teams to ensure adequate security capabilities and controls are in place within the technology stack to mitigate security risks and meet the highest security and compliance requirements
- Work closely with prospects and the proposal managers to provide detailed responses to security assessment questionnaires
- Continuously research, design, advocate and recommend new security technologies, architectures, and products that will ensure meeting all compliance requirements
- Function as the go-to individual with in-depth understanding of all security and compliance related nuances within the Headspace Health stack
- Develop the ability to effectively navigate a highly complex environment to independently retrieve technical evidence for gaining assurance over the effectiveness of controls
- Serve as the subject matter expert who will actively guide the broader risk and compliance team on all security-related technical components within the environment
- Conduct ad-hoc security architecture/application reviews to assess new risks, keep abreast of latest cyber security technical risks, and foster a culture of continuous service improvement and service excellence. Pre-audit analysis, strategic product analysis, diligence for components/technologies under review
- Support for product testing in the course of audit and provide the post-audit analysis and assessment
- Telecommuting permitted pursuant to company policy
Our take
The world is facing a growing mental health crisis. In 2022, the US saw the proportion of the population with acute anxiety, depression, or other mental health needs grow from 20% to 40%.
Headspace is a digital mental health platform best known for its guided meditation and mindfulness app, which has expanded into a broader suite of mental health services. Through therapy, coaching, meditation, and self-care tools, the company is making mental health support more accessible and preventative.
In 2021, Headspace merged with on-demand mental healthcare provider Ginger in a $3B deal to form Headspace Health, a move that brings clinical care and everyday mental wellness into a single platform. Today, its services are being used by more than 100M people and over 4,000 enterprises, including Starbucks, Adobe, and Paramount.
Demand for virtual mental healthcare continues to rise, and the market is becoming increasingly competitive, with players such as Hims & Hers Health entering the space. However, Headspace stands out by combining clinical care with everyday mental wellness tools, expanding its offerings through strategic acquisitions like AI health firm Sayana, and now bringing its services directly to businesses in the UK, positioning itself for growth bon a global scale.
Steph
Company Specialist at Welcome to the Jungle
Insights
11% employee growth in 12 months
Company
Funding (last 2 of 5 rounds)
Jun 2020
$47.7m
SERIES C
Feb 2020
$53m
SERIES C
Total funding: $175.4m
Company benefits
- Comprehensive medical, dental, and vision healthcare plans
- 12 weeks paid parental leave $5K annual / $10K lifetime family planning benefit via Carrot
- Quarterly "Refresh Days" (Fridays off for self-care) + "Focus Fridays" for deep work
- Flexible paid time off to rest and recharge
- 12 paid company holidays + 20 bereavement days
- 401K with company match
- Lifetime Headspace membership + access for 10 friends & family
Company HQ
Financial District, San Francisco, CA
Leadership
Tom Pickett
(CEO)Prior to joining Headspace in 2024, Tom was a CRO at DoorDash and CEO of Crunchyroll. He also spent nearly 11 years at Google, while there he held various roles, including Senior Director & Global Head of Content Operations at YouTube and VP of YouTube Content and Operations.
Karan Singh
(COO)Karan is also the co-founder and COO of Ginger. Previously, he worked in Sales & Strategy at Humedica and as a Consultant at ZS Associates.
Lisa Mulrooney Gross
(CPO)Lisa is also the Founder and Principal of HRx Leadership Advisors. Previously, she served as the CPO at ChargePoint and as the CPO/SVP/Head of HR Fitbit at Google.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 8 more jobs at Headspace Health