Senior Security Analyst, Rightway
$120-145k
Personalized healthcare platform for employees
Open for applications
Personalized healthcare platform for employees
501-1000 employees
Open for applications
$120-145k
501-1000 employees
Company mission
To simplify the healtcare experience.
Role
Who you are
- This role is ideal for someone who enjoys hands-on GRC work and wants to grow as a senior individual contributor within a collaborative, mission-driven healthcare company transforming pharmacy benefit management and care navigation
- 3-5 years of experience in information security, GRC, or related disciplines
- Familiarity with security compliance frameworks and regulation (e.g., SOC 2, ISO 27001, NIST, HIPAA)
- Experience responding to security questionnaires and customer due diligence requests
- Experience performing vendor security reviews and risk assessments
- Strong organizational skills and the ability to manage multiple tasks and deadlines simultaneously
- Passionate advocate for governance, risk, and compliance, believing that these are not merely check box activities, but vital tools that significantly improve security posture and protect the organization
- Interest in emerging technologies and willingness to develop subject matter expertise in AI risk and compliance
What the job involves
- Rightway Healthcare is looking for a Senior Security GRC Analyst ready to take their experience to the next level. If you’ve worked on GRC programs in a fast-paced or startup environment, this is your chance to apply that agility and execution focus in a growing healthcare organization
- You’ll also have the opportunity to contribute to emerging areas of AI risk and governance as Rightway integrates advanced technologies into its platform
- Reporting to the Security GRC Manager, you’ll own key deliverables that keep our security and compliance programs running smoothly, supporting customer assurance, vendor risk reviews, and recurring governance activities
- Core GRC Operations:
- Coordinate and execute recurring GRC tasks such as quarterly access reviews, audit evidence collection, and risk register reconciliation
- Document and track completion of control activities and escalate issues where needed
- Assist with internal and external audits, ensuring timely and complete evidence collection and review
- Customer Assurance:
- Collaborate with Sales, Legal, and Product teams to lead responses for customer security questionnaires and RFPs, progressively owning more complex requests as your experience deepens
- Maintain and continuously improve a centralized repository of commonly requested security documentation and artifacts (e.g., SOC 2, SIG, CAIQ)
- Vendor Risk Management:
- Work closely with a broad array of business leaders to conduct initial and periodic vendor risk assessments, ensuring that third parties meet Rightway's security and compliance standards
- Track and follow up on remediation plans and risk treatment for vendors posing unacceptable risk
- Enable and support automation and optimization of the vendor risk assessment lifecycle using both AI and traditional tooling
- AI Governance:
- Support the implementation and operationalization of AI risk and governance controls in alignment with ISO/IEC 42001 (AI Management System) and emerging regulatory guidance e.g., CAIA (Colorado AI Act)
- Monitor AI systems for compliance with ethical and legal standards
Our take
Modern healthcare ecosystems are fragmented, so patients have to organize multiple services to get the care they need. This can be complex, time-consuming and expensive, which is why Rightway provides a unified healthcare organizational system to manage employee healthcare benefits better.
The company’s aim is to simplify access to healthcare, whilst also saving users money through price comparison services. Examples of its offerings are a pharmacy services platform that enables employees to access medication via a smartphone app, and the Advocate platform that helps to close care gaps.
The startup serves companies of all sizes, from small businesses to enterprises like Burger King, Popeyes and RBI. It has hundreds of thousands of users across the US, and has raised considerable funding which will enable it to further develop its platform and strengthen its foothold among employers, health plans, third-party administrators and other potential clients.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
14% employee growth in 12 months
Company
Funding (last 2 of 6 rounds)
Mar 2024
$108.8m
LATE VC
Mar 2021
$100m
SERIES C
Total funding: $240.8m
Company benefits
- Competitive compensation
- Health Savings Account
- External learning and career development panels
- Hybrid in-office culture and commuter benefits at our NYC HQ
- Full medical, dental, and vision insurance
- 401K
Company HQ
West Village, New York, NY
Leadership
Jordan Feldman
(Co-Founder & CEO)Studied Government and Economics at Harvard before working in investment at Goldman Sachs and Redbird.
Theodore Feldman
(Co-Founder & Chief Medical Officer)Also Chief Medical Officer at Cadence. They studied Medicine at Harvard University and the Albert Einstein College of Medicine. Worked as Medical Director at South Miami Heart Centre and the Head of Cariology at FIU Wertheim College.
Share this job
View 14 more jobs at Rightway