Security Lead, XP Health
$150-170k
Office located in San Carlos, CA
Digital-first vision care
Open for applications
Digital-first vision care
21-100 employees
Open for applications
$150-170k
Office located in San Carlos, CA
21-100 employees
Company mission
To reimagine how organizations think about vision benefits and bring that transformational change to 1 billion people.
Role
Who you are
- 5+ years of experience managing compliance programs for SOC 2, HiTrust, or similar frameworks at companies with 80+ employees
- Proven track record of handling HIPAA, SOC 2, and HiTrust audits from start to finish, including providing evidence to auditors and managing security training
- Strong IT skills, including experience with laptop provisioning, firewall setup, and VPN maintenance, with a focus on security
- Demonstrated ability to manage and improve compliance processes, including tracking training programs, running penetration tests, and ensuring adherence to security protocols
- Strong program management and organizational skills, with experience coordinating cross-functional stakeholders and managing quarterly security reviews
- Excellent communication and client-facing skills, with the ability to present security protocols and audit findings to both internal teams and external auditors
What the job involves
- As the Security Lead, you will be at the forefront of ensuring the company meets critical compliance standards, including SOC 2, HIPAA, and HiTrust
- You will take full ownership of the compliance function, working directly with leadership to manage audits, implement IT security protocols, and oversee training programs
- This is an exciting opportunity to join a fast-growing healthcare B2B company that serves large clients and undergoes rigorous annual audits to maintain trust and security
- You’ll be instrumental in shaping the company’s security posture as we scale, deepening our compliance and expanding our programs to meet the increasing complexity of our operations
- This role offers the chance to impact the company’s growth while building a scalable and robust security framework, with opportunities for leadership and strategic influence in the coming years
- Lead the execution of annual audits for SOC 2, HIPAA, and HiTrust, ensuring the company meets and exceeds compliance requirements
- Develop, manage, and track annual compliance training programs for all employees
- Oversee IT security tasks, including provisioning laptops, setting up compliant firewalls, and maintaining VPNs in line with industry best practices
- Conduct quarterly security and compliance review meetings to identify risks, escalate issues, and drive necessary changes to maintain security posture
- Manage client-facing calls for security due diligence and provide audit evidence to external auditors
- Monitor and improve SLAs for addressing data breaches or compliance gaps, ensuring timely resolution of critical issues
- Collaborate with leadership to continuously improve compliance initiatives and scale security programs as the company grows
Our take
Vision care and insurance, as with many corners of healthcare, can be complex for patients to navigate. XP Health is out to change this, with its digital-first vision care platform.
The company wants to combat some of the problems with traditional vision insurance - such as high out-of-pocket costs for frames. Through the platform, the company makes it easier and cheaper for members to use their benefits for care both online and in person. For employers, this means higher enrolment and use, but for a lower cost.
A stand-out part of XP Health's approach is its use of technologies such as machine learning and artificial intelligence across its platform. It has earned good levels of investment that will be used to continue expanding its product offering and increase its focus on Generative AI products that will improve the member experience.
Steph
Company Specialist at Welcome to the Jungle
Company
Funding (last 2 of 3 rounds)
Sep 2024
$33.2m
SERIES B
Sep 2022
$17.1m
SERIES A
Total funding: $55.3m
Company benefits
- Bonus scheme
- Equity
- Medical, dental and vision
- Pet friendly
- 401K
- Flexible PTO
- FSA
- Onsite lunch and snacks
Company values
- Act for our members -Our members and their experience are at the center of everything we do. We intensely focus on enriching their lives by focusing on excellence in how we serve, analyzing data, and thinking differently
- Celebrate each other - Our unique blend of experiences and perspectives enables us to build innovative products and our drive to create change doesn't get in the way of our humility, empathy, and compassion for one another
- Champion the adventure - The road to democratizing access to vision care comes from overcoming unique challenges, not by embracing the status quo. We cherish the milestones, teamwork, and fun that make the journey worthwhile
- Embrace a growth mindset - We’re able to consistently deliver measurable results by having a growth and owner’s mindset and being curious, open-minded, and direct
Company HQ
Ventura, Palo Alto, CA
Articles
Leadership
Antonio Moraes
(Co-Founder & CEO)Former Co-Founder and Managing Partner at Vox Capital. Was also Chief Investment Officer at Stanford GSB Impact Fund, Co-Author and Co-Producer of A New Capitalism, and Hejoassu Holding Board Member at Votorantim.
James Wong
(Co-Founder & CTO)Member of Sand Hill Angels. Former Venture Fellow at Spike Ventures, Engineering Manager at Airbnb and Senior Software Engineer at Facebook.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 6 more jobs at XP Health