Senior Manager of Information Security, Governance, Risk, Compliance, Stellar Health
$170-200k
+ Equity + Bonus
Incentive program for health providers
Be an early applicant
Incentive program for health providers
201-500 employees
Be an early applicant
$170-200k
+ Equity + Bonus
201-500 employees
Company mission
To improve the quality of care and affordability of healthcare for millions of patients in the United States.
Role
Who you are
- We are looking for an individual who is passionate about building, scaling, and maintaining security governance processes that are thoughtfully designed for both external users, customers, auditors, and teammates
- 8-10 years of security program experience, with 4-5 years of direct experience building and implementing GRC tooling and processes
- Familiarity and experience helping design controls in AWS cloud environments and infrastructure that meet regulatory commitments
- Demonstrated experience with Vanta
- Demonstrated experience with security monitoring tools including:
- Crowdstrike
- Panther
- DefectDojo
- AWS native security tooling (Inspector, Config, SecurityHub)
- Experience leading audits of security frameworks (e.g. SOC 2 Type 2, ISO 27001, HITRUST). Preference given to those with HITRUST experience
What the job involves
- Stellar Health is looking for a Senior Manager - Information Security, Governance, Risk, and Compliance to help prioritize and drive our Information Security program and investments. This role will report to our Senior Director, IT & Security
- You will have the autonomy and authority to approve or reject evidence submissions, accept low-risk exceptions, approve compensating controls, and close audits
- Stellar Health operates in the HealthTech space and is HITRUST R2 certified
- Reducing the effort to maintain and demonstrate our alignment to HITRUST by maximizing our use of Vanta to automate the collection of evidence, maintain up to date documentation, and deploy continuous testing of controls
- Aligning with our cross-functional teams as they deliver on their controls and support our security processes, ensuring clarity and accountability for all parties
- Leading our annual and ongoing risk assessment processes including the managing the risk register and mitigation plans
- Enabling company growth acceleration by facilitating the strategic and thoughtful completion of customer and vendor security reviews
- Overseeing incident response processes, supporting documentation, and corrective actions
- Deploying and managing the third-party vendor management program and processes
- Oversees the selection and deployment of security related training across the enterprise
- Creating and managing dashboards and other materials that keep leadership informed and support Committee and Board meetings
- Within your first month, you should have a solid foundation of our current security posture, controls, and security processes, what is working well and where there are gaps. You will use this foundation to build a longer term roadmap for our GRC efforts
- Support our interim HITRUST assessment with a focus on open items that could require remediation
- Review the current GRC tooling environment and produced a plan for enhancements
- Prioritize a list of improvements to the third party vendor management program
- Implement improvements to current evidence collection processes and/or automations
- Facilitated the interim HITRUST assessment with the external auditing firm
- Implemented 1-2 improvements to the GRC tooling environment
- Refresh our customer facing trust center
- Create a remediation plan for HITRUST gaps, if any, including timelines and commitments from business owners
- Establish a process to review high risk applications and systems with System Owners to ensure they align to any applicable security standards/controls and other security recommendations
Our take
A problem in healthcare is little thought is given to the doctors and staff who coordinate all of the daily patient workflow, such as historical claims, pharmacy requests, lab work, testing and billing. Stellar Health aims to drastically reduce these 'chores' through a cloud-based platform on which primary care providers can offer value-based care through real-time information updates about patients.
The point-of-care workflow platform also strives to close the incentive gap between payors and care providers by helping practitioners earn more revenue for keeping patients healthy, rather than simply charging for procedures and treatments. While Stellar Health faces stiff competition from major players such as Siemens Healthcare and AthenaHealth, it has already made great ground in the market with over 1.1M patients across 37 states.
The company has secured significant investment from Primary Venture Partners and Point 72. This funding and its growing revenue are being put towards further scaling its operations and accelerating its product development. Operating in a rapidly growing industry which reached a value of over $4 billion in 2025, Stellar Health is in a good position for future growth and success.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
-3% employee growth in 12 months
Company
Funding (2 rounds)
Sep 2021
$60m
SERIES B
May 2020
$10m
SERIES A
Total funding: $70m
Company benefits
- Medical, dental, and vision benefits: With coverage starting on your first day of employment
- Collaborative and inclusive culture: Even though we are virtual right now, we are committed to having fun as a team on a regular basis. Virtual magicians, game nights, outdoor happy hours and team picnics
- Generous paid time off policy: We follow a "self managed" PTO philosophy. Take time when you need it
Company HQ
Union Square, New York, NY
Leadership
Michael Meng
(Co-Founder & CEO)Studied Business Adminstration, Finance and Accounting at the University of Michigan, before obtaining an MBA from Wharton School, University of Pennsylvania. Started out as an Investment Banking Analyst at Lazard Freres. Served as Principal at Apax Partners, and currently sits on the board of the Global Language Project, CUNY Graduate School of Public Health and Health Policy and Medicomp Inc.
Octavian Costache
(Co-Founder & CTO)Obtained a Masters in Computer Science and AI from the University POLITEHNICA of Bucharest. Started out as a freelance Software Engineer, before joining Google as a Senior Software Engineer in 2005. Was a HackStar at TechStars in 2012. Co-founded Spring Inc. in 2013, and Stellar Health in 2018.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 4 more jobs at Stellar Health