Security Risk Specialist, Hinge Health
$73-132.5k
Digital clinic for joint and muscle pain
Job no longer available
Digital clinic for joint and muscle pain
1001+ employees
Job no longer available
$73-132.5k
1001+ employees
Company mission
To improve the lives of people suffering from chronic conditions, starting with musculoskeletal conditions like back and joint pain.
Role
Who you are
- Bachelor's degree in computer science, information assurance, MIS or related field, or equivalent work experience
- Experience in public accounting and/or internal audit functions involving public companies with exposure to advanced information system audit techniques, including but not limited to SOX 404, NIST SP 800-53, NIST CSF, HITRUST, SOC 1, SOC 2, ISO 27001, etc
- 2+ years of experience in Information Security and experience driving security risk management activities
- At least three (2) years of experience performing IT General Controls (ITGCs) and/or IT Application Controls assessments; evaluating risks-based principles and executing audit programs
- Capability to assess maturity of controls by conducting control design and operating effectiveness reviews
- Experience conducting third-party security risk assessments while collaborating with cross functional teams to effectively manage risk
- Working knowledge of relevant compliance, privacy, regulatory frameworks (e.g., HIPAA, HITRUST SOX, GDPR)
- Experience with common information security management frameworks (e.g., HITRUST, NIST) and healthcare regulations
- Familiarity with cloud environments and cloud computing service deployment architecture (IaaS, PaaS, SaaS)
- Excellent written, verbal and nonverbal communication skills, including the ability to communicate security and risk-related concepts to nontechnical audiences within the organization
- Motivate, inspire, and create a positive work/team culture: You successfully maintain a high level of motivation, positive can-do attitude, and inclusive culture in your teams
- CISSP, CCSP, CEH, CISA CRISA or similar, related certification
What the job involves
- The Security Risk Analyst position will be responsible for performing internal and external security risk assessments
- This role will help maintain a comprehensive risk management program to identify, evaluate and monitor various information and third party security risks
- This position will work closely with cross functional teams to ensure that information security risks associated with critical Hinge Health assets, data, operations, and third-party relationships are properly identified and effectively managed
- Contribute to building and maturing Hinge Health’s security policy and control framework supporting various standards (e.g., NIST Cybersecurity Framework, ISO 27001, HITRUST) and regulatory/compliance requirements (e.g., HIPAA, Sarbanes Oxley, GDPR)
- Execute IT audits, as well as, performing controls assessments for industry accepted frameworks such as SOX, NIST, HITRUST
- Conduct assessments for IT general and application controls in the areas of system development, Identity and Access Management (IAM), logging and monitoring, vulnerability management, change management, logical access, data networks and computer operations
- Deliver guidance related to enhancing the security posture of information systems solutions
- Work closely with IT, Information Security, and Engineering teams to develop a strategy and program to effectively manage information security risk and further improve security posture and maturity
- Participate in automating common repetitive audit tasks to reduce time and effort spent in preparing for internal and external audits
- Assist in building continuous security management, monitoring and testing capabilities within a cloud native environment
- Evaluate the design and effectiveness of controls, as well as, track, monitor and assist process owners with remediation plans
- Remain up-to-date on legal and regulatory changes, emerging threats and evolving technologies and implement appropriate control mechanisms based on risks within Hinge Health’s environment
- Collect and maintain a library of objective evidence to show ongoing compliance with the documented controls
- Ability to put into practice security & privacy frameworks & standards such as ISO 27001, SOC2, HITRUST and HIPAA
- Provide information to external business partners and customers on Hinge Health’s internal security capabilities and practices in support of business objectives
Our take
Musculoskeletal (MSK) conditions are prime concerns for individuals and employers. In fact, 1 in 2 Americans experience some form of back and joint pain. Hinge Health has created a platform that brings treatment providers and patients together in order to prevent, treat and rehabilitate a variety of MSK conditions.
MSK spending has nearly doubled from $10 billion to almost $20 billion over the last 10 years. Analysis by Hinge Health indicates that MSK is an employer's highest medical claim expense. Despite this, patient results have not improved, which has led to a reported 70% of employers looking to adopt a digital MSK solution.
This wealth of opportunity has led to Hinge Health providing digital MSK clinics for employees at 1000+ companies, including Salesforce, US Foods and Boeing. With a valuation of almost $4 billion, the company stands as one of the most valuable startups in digital health and secured an IPO in 2025, marking a new and exciting chapter for the healthtech platform.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
64% employee growth in 12 months
Company
Funding (last 2 of 7 rounds)
Oct 2021
$400m
SERIES E
Jan 2021
$300m
SERIES D
Total funding: $825.8m
Company benefits
- Comprehensive medical, dental, and vision coverage
- We offer help with gender-affirming care, tools for family and fertility planning, and travel reimbursements if healthcare isn't available where you live
- Manage your own learning and development budget
- Mental health and lifestyle stipends to cover your favorite wellness services, workout classes, gym subscriptions, and work-from-home equipment
- Flexible vacation and paid time off
Company HQ
Financial District, San Francisco, CA
Leadership
Gabriel Mecklenburg
(Co-Founder & CTO)Studied at Cambridge and Imperial College London. They were the COO of Oxbridge Biotech Roundtable, and co-founded Marblar in 2012.
Daniel Perez
(Co-Founder & CEO)Studied Biochemistry at Oxford before co-founding Marblar. Was founder and CEO of Oxbridge Biotech Roundtable.
Share this job