Senior Security Governance Risk & Compliance Analyst, Alma
$145-174k
More information about location
Membership-based network for mental health care providers
Open for applications
Membership-based network for mental health care providers
501-1000 employees
Open for applications
$145-174k
More information about location
501-1000 employees
Company mission
To simplify access to high-quality, affordable mental health care, by making it easy and financially rewarding for therapists to accept insurance and offer in-network care.
Role
Who you are
- You have 5+ years of work experience in Information Security, especially in a GRC analysis role
- You have experience working in health tech or other highly regulated industries (banking, insurance, etc)
- You have experience leading SOC 2 audits and/or HITRUST certifications with minimal findings
- You have experience deploying GRC solutions (Drata or equivalent), putting in place a unified control framework enabling evidence collection automation and continuous compliance
- You strongly understand security best practices and controls frameworks (NIST CSF, NIST 800-53, AICPA Trust Services Criteria, HITRUST CSF, PCI DSS, HIPAA Security Rule, and Breach Notification)
- You have experience implementing security controls and policies that align with AWS security best practices
- You have experience driving security awareness programs, including phishing simulation tools (KnowBe4 or equivalent)
- You have experience performing risk assessments, with an understanding of quantitative risk analysis frameworks (FAIR)
- You have experience writing customer-facing materials in partnership with with product and marketing teams
- You have strong written and verbal communication skills and can convey complex technical topics to non-technical stakeholders clearly and concisely
- You feel a passion for Alma's mission – to improve the experience of therapy for providers and their clients and simplify access to care
What the job involves
- Alma is seeking a mission-driven Senior Security Governance Risk and Compliance (GRC) Analyst to join our team
- We are dedicated to building secure and compliant tools and services that help providers more easily manage and grow their practice
- Acting as a principal aide to the VP of Security and IT, this role will play a critical role in enabling a culture of security at Alma, making security a product differentiator that builds confidence and trust with our providers, and preparing Alma for annual audits and certifications (such as SOC 2 and HITRUST)
- In this role you will perform risk assessments, create and maintain our security policies, educate our staff by developing a security awareness program, respond to security assessments, and review our vendor’s security
- Perform risk assessments and reports on Alma’s risk management program
- Collaborate with stakeholders to identify and facilitate the implementation of mitigating controls
- Streamline and maintain Alma’s security policies and standards
- Prepare the organization and facilitate annual audits and certifications (SOC 2, PCI)
- Educate Alma’s staff by creating and managing an effective security awareness program
- Develop our vendor risk program, ensuring our vendors meet Alma security standards
- Develop Alma’s Trust program, preparing materials and responses to security assessments, and making security a product differentiator that builds confidence and instills trust in our providers
- Develop and measure key metrics, and coordinate activities in support of cybersecurity priorities
Our take
4 in 10 adults in the United States suffer from some form of anxiety or depression, but most go without appropriate support because of difficulties in accessing mental health care providers. Alma exists to meet a growing demand for mental health services by supporting providers in offering online care, and making it easy for people who need help to find qualified, in-network therapist who meets their needs.
There has been something of a boom in the virtual mental health space, and by encouraging online therapy Alma is competing against a plethora of well-funded apps aimed at self help and mental wellbeing offered at a far lower price than regular therapy. However, these are largely unregulated and their quality is often questionable. By prioritising vetted and professional therapists, Alma has provided a real alternative to in-person therapy and this has allowed it to grow rapidly, growing its network to over 8,000 therapists across all 50 states.
Alma's success has also attracted a large amount of funding. This is being used to further expand its network and to develop the tools offered to its providers. Having scaled rapidly through 2022 it is showing no signs of slowing down, and is well poised for future growth.
Steph
Company Specialist at Welcome to the Jungle
Insights
77% employee growth in 12 months
Company
Funding (last 2 of 5 rounds)
Aug 2022
$130m
SERIES D
Aug 2021
$50m
SERIES C
Total funding: $220.5m
Company benefits
- We’re a remote-first company
- Health insurance plans through Cigna (medical and dental) and MetLife (vision), including FSA & HSA plans
- 401k plan (Roth and traditional)
- Free Alma platform access
- Monthly therapy and wellness stipends
- Monthly co-working space membership stipend
- Monthly work-from-home stipend to power your wifi, lunches, coffee, etc
- Pet discount program through United Pet Care
- Financial perks and rewards through BenefitHub
- Free EAP access through LifeWorks
- One-time home office stipend to set up your home office
- Comprehensive parental leave plans
- 9 paid holidays, 1 Alma Mental Health Day, and 1 Alma Volunteering Day
- Vacation and time-off benefits
Company HQ
Downtown Brooklyn, NY
Leadership
Harry Ritter
(CEO)Studied at Harvard and qualified as an MD at The University of Miami. Worked for a year as a Resident Physician before spending almost 2 years as a McKinsey Associate. Worked at Oscar Insurance as a Medical Director and VP of Care Delivery.
Share this job
View 16 more jobs at Alma