Senior Governance, Risk, and Compliance Analyst, evermore
$166.1-219.6k
+ Discretionary bonus & Equity
More information about location
Social justice healthcare technology
Be an early applicant
Social justice healthcare technology
21-100 employees
Be an early applicant
$166.1-219.6k
+ Discretionary bonus & Equity
More information about location
21-100 employees
Company mission
To eliminate health inequities and create a healthier America.
Role
Who you are
- Proven experience managing or executing compliance programs covering frameworks such as PCI, HITRUST, HIPAA, and SOC 2 Type 2
- Demonstrated ability to perform internal gap/fit analysis related to complex security control standards
- Experience with audit tooling environments like Vanta, including the collection and management of audit evidence
- Background in coordinating external commercial and state-level compliance assessments
- Familiarity with HITECH requirements, HIPAA Security Rule and FedRAMP
- Strong organizational skills necessary to manage high-volume, 'bursty' audit assessment workloads
- Ability to work proactively and understand what is needed to accomplish compliance objectives
- Bachelor’s degree or similar experience strongly preferred
- Travel may be required from time to time as part of the role, for company events and business needs
- Evermore is a remote-first, distributed workforce. Candidates should be comfortable with, and equipped to work within, a distributed remote team, including having reliable internet access and basic home office equipment. evermore will provide a work laptop, and mouse/keyboard upon request
What the job involves
- Working within the security function, the GRC Analyst will be responsible for managing the company’s regulatory and self-driven compliance targets, primarily utilizing the Vanta platform
- His role requires expertise across a broad scope of frameworks, including PCI, HITRUST, HITECH, HIPAA (Security Rule), SOC 2 Type 2, and FEDRAMP Moderate (NIST 800-53)
- A core function is to handle evidence gathering for all audits, present assessment results, and conduct necessary gap/fit analyses, especially for advanced controls like those required for FedRAMP Moderate
- The analyst will also coordinate and support high-volume commercial and state audits
- Working within an organization created at the intersection of health care, retail and financial technology, no two days will look the same
- Manage regulatory and self-driven infosec compliance targets, including conducting work within the Vanta platform
- Gather necessary evidence for all security audits and present subsequent assessment results
- Review and determine the correct security training for all employees
- Serve as the primary resource for internal gap/fit analysis on new controls, such as those required to meet the definition of FedRAMP Moderate
- Coordinate commercial audits/assessments and collaborate closely with the legal and compliance function on privacy compliance matters
- Support compliance across established frameworks including PCI, HITRUST, HITECH, HIPAA, NIST and SOC 2 Type 2
- Perform and manage security risk reviews for third-party vendors
- Lead and support Disaster Recovery (DR) and Business Continuity Planning (BCP) activities, including planning, testing, and documentation to ensure organizational resilience
- Participate in risk management activities, including maintaining and updating risk registers, advising stakeholders on mitigation strategies, and monitoring risk metrics across the organization
Application process
- All offers for employment are contingent upon successful completion of a background check
Our take
Between 80% and 90% of a person’s health is determined by environmental and behavioural factors. These Social Determinants of Health (or SDOH) are what evermore (previously Soda Health) aims to address, setting out to create more equitable styles of health benefits and ensure better health across social borders.
It works by changing the way health benefits are claimed, offering members a sort of pay-as-you-go benefits credit card. What's covered here are things not traditionally included among health benefits, which are impacted by wealth inequity, the ability to buy nutritional foods or over-the-counter medicines, and limited access to transportation for healthcare appointments.
It’s an interesting model, and not one which has many directly comparable competitors. But the concept of HealthTech for SDOH is an overcrowded market, and evermore's $50 million in Series B funding awarded in 2024 will help it stand firm against larger start-ups like Unite Us or Cityblock.
Freddie
Company Specialist at Welcome to the Jungle
Company
Funding (last 2 of 3 rounds)
Dec 2024
$50m
SERIES B
Sep 2022
$25m
SERIES A
Total funding: $81m
Company benefits
- Equity
- Medical, Dental, and Vision with 90% paid employer premium contributions for all tiers
- 100% Employer Paid Short-Term & Long-Term Disability
- 100% Employer Paid Basic Life Insurance Policy
- Employee Assistance Program (EAP)
- 401k Program
- Unlimited PTO
- Paid Holidays
- Flexible Work Schedule within Core Hours
Company HQ
Keystone, FL
Leadership
Robby Knight
(Co-Founder & CEO)Formerly a consultant at Trideate Consulting Group and 8760. They also worked in a number of different roles at Walmart, including Director of Healthcare Strategy and Head of Consumer Health Innovation.
Daryl Risinger
(Co-Founder & President)Previously worked as CEO of Salus Innovation, and as VP and Chief Growth Officer for Health and Wellness at Walmart. They were also Senior Vice President of Marketing and Product Development at Concentra.
Chris Brown
(Co-Founder & CTO)Former CTO of Aurora Investment Management and Backstop Solutions Group. They were VP of a number of departments at Rally Health over 7 years, and still advise part-time time at OneVillage.
Jared Dauman
(Co-Founder & Chief of Payments)Previously they were an Associate in Digital Health, and a Senior Category Specialist in Health and Wellness at Walmart.
Share this job
View 2 more jobs at evermore