Senior Security Engineer, K Health
Compliance and Risk
$150-185k
AI-driven primary care company
Job no longer available
AI-driven primary care company
201-500 employees
Job no longer available
$150-185k
201-500 employees
Company mission
To help everyone get access to high-quality care.
Role
Who you are
- Experience: 3-5+ years of experience in Information Security, Governance, Risk, Vulnerability Management, Compliance (GRC), or IT Audit
- Program Management: Proven experience managing specific compliance verticals like vulnerability management or business continuity
- Communication: Ability to translate compliance requirements into actionable technical tasks for engineering teams
- Organization: Exceptional documentation skills—you understand that "if it isn't written down, it didn't happen."
- Influence: Ability to drive consensus and compliance across teams without direct management authority
What the job involves
- We are seeking a detail-oriented, proactive Security Compliance Engineer to join our Security team
- In this role, you will not just check boxes; you will own the governance and compliance lifecycle for critical security programs and, in many cases, be actively involved in implementation and remediation
- You will ensure that our vulnerability management, privacy, data retention, and business continuity efforts meet the rigorous standards of SOC 2, HIPAA, and HITRUST, protecting our sensitive healthcare data and maintaining trust with our partners
- Vulnerability Management Governance:
- Oversee the compliance aspect of the vulnerability management program, ensuring scans and remediation efforts adhere to SLAs
- Track and report on remediation timelines to ensure evidence is audit-ready
- Collaborate with engineering and IT teams to validate that exceptions are documented, risk-accepted, and reviewed periodically
- Manage and handle “tracking technologies” to comply with partner requirements
- Privacy & Data Governance:
- Manage adherence to internal privacy policies and external regulations (HIPAA, State Laws, CCPA)
- Manage adherence to partner-specific health system requirements
- Monitor data retention schedules to ensure data is stored, archived, and purged in accordance with policy and legal requirements
- Conduct periodic privacy impact assessments (PIAs) for new products or features
- Disaster Recovery (DR) & Business Continuity (BCP):
- Coordinate annual or bi-annual DR/BCP table-top exercises and technical tests
- Maintain and update DR/BCP documentation, ensuring contact lists and recovery procedures are current
- Review post-mortem reports from tests to ensure continuous improvement and compliance with availability trust principles
- Audit & Framework Management (SOC 2 & HITRUST):
- Serve as a primary point of contact for external auditors during SOC 2 and HITRUST assessments
- Collect, organize, and review evidence on the controls for the programs above
- Identify compliance gaps and drive remediation projects before external audits begin
- AI/ML in healthcare and emerging federal and state AI regulations
Our take
K Health is a telemedicine startup improving accessibility to primary care and medical information. It supplies an AI-powered, fully anonymised symptom checker and an online 24/7 consultation service that enables people to get more accurate diagnostic information faster.
Available through health plans or directly through a mobile app, K Health's platform leverages predictive AI models to help optimise diagnosis and treatment. This, on top of its relative affordability, sets it apart from competitors that offer similar online consultation services.
Although many remain skeptical about the maturity of healthcare AI, interest remains high among professionals. As such, K Health continues to attract high levels of investment, the latest of which will help expand operations and supercharge its development efforts.
Freddie
Company Specialist at Welcome to the Jungle
Insights
-12% employee growth in 12 months
Company
Funding (last 2 of 11 rounds)
Jul 2024
$50m
LATE VC
Jul 2023
$59m
LATE VC
Total funding: $392.8m
Company benefits
- Equity in K Health for all full-time employees
- Our hybrid work schedule offers working from home and in-office days
- Up to 6 weeks of parental leave with additional leave offered through our 3rd party administrator, Sparrow
- 18 Vacation days, 5 sick days, and 2 personal days (plus days off for national holidays and multiple company-wide 3 day weekends per year)
- Choose between three comprehensive plans for your medical, dental, and vision (employees are also eligible to use our K Health app for free!)
- Gym Reimbursement for any employees who are enrolled in a medical plan
- K will match 100% of employee contributions to their 401(k) up to 3% of their salary, and then 50% up to 5%
- FSAs, HSA, Parking and Commuter accounts
Company HQ
Chelsea, New York, NY
Leadership
Adam Singolda
(Co-Founder & Board Member)Currently Founder and CEO at Taboola. Worked as a R&D Manager in the IDF for over 6 years, before working as a TechStars Mentor in NYC.
Allon Bloch
(Co-Founder & CEO)Former CEO of Hydrogen Health. Was a Partner at JVP before serving as CEO of Wix.com and founding mySupermarket and Vroom.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 6 more jobs at K Health