Senior Security Analyst

ABOUT THE ROLE:

Rightway Healthcare is looking for a Senior Security GRC Analyst ready to take their experience to the next level. If youve worked on GRC programs in a fast-paced or startup environment this is your chance to apply that agility and execution focus in a growing healthcare organization. Youll also have the opportunity to contribute to emerging areas of AI risk and governance as Rightway integrates advanced technologies into its platform.

Reporting to the Security GRC Manager youll own key deliverables that keep our security and compliance programs running smoothly supporting customer assurance vendor risk reviews and recurring governance activities. This role is ideal for someone who enjoys hands-on GRC work and wants to grow as a senior individual contributor within a collaborative mission-driven healthcare company transforming pharmacy benefit management and care navigation.

WHAT YOULL DO:

Core GRC Operations

• Coordinate and execute recurring GRC tasks such as quarterly access reviews audit evidence collection and risk register reconciliation.
• Document and track completion of control activities and escalate issues where needed.
• Assist with internal and external audits ensuring timely and complete evidence collection and review.

Customer Assurance

• Collaborate with Sales Legal and Product teams to lead responses for customer security questionnaires and RFPs progressively owning more complex requests as your experience deepens.
• Maintain and continuously improve a centralized repository of commonly requested security documentation and artifacts (e.g. SOC 2 SIG CAIQ).

Vendor Risk Management

• Work closely with a broad array of business leaders to conduct initial and periodic vendor risk assessments ensuring that third parties meet Rightways security and compliance standards.
• Track and follow up on remediation plans and risk treatment for vendors posing unacceptable risk.
• Enable and support automation and optimization of the vendor risk assessment lifecycle using both AI and traditional tooling

AI Governance

• Support the implementation and operationalization of AI risk and governance controls in alignment with ISO/IEC 42001 (AI Management System) and emerging regulatory guidance e.g. CAIA (Colorado AI Act).
• Monitor AI systems for compliance with ethical and legal standards.

WHO YOU ARE:

• 3-5 years of experience in information security GRC or related disciplines.
• Familiarity with security compliance frameworks and regulation (e.g. SOC 2 ISO 27001 NIST HIPAA).
• Experience responding to security questionnaires and customer due diligence requests.
• Experience performing vendor security reviews and risk assessments.
• Strong organizational skills and the ability to manage multiple tasks and deadlines simultaneously.
• Passionate advocate for governance risk and compliance believing that these are not merely check box activities but vital tools that significantly improve security posture and protect the organization.
• Interest in emerging technologies and willingness to develop subject matter expertise in AI risk and compliance.

SALARY (BEFORE COMMISSION POTENTIAL): $120000 - $145000

Offer amounts for both remote and in office roles are influenced by geographic location.

CYBERSECURITY AWARENESS NOTICE

In response to ongoing and industry-wide fraudulent recruitment activities (i.e. job scams) Rightway wants to inform potential candidates that we will only contact them from the @ email domain. We will never ask for bank details or deposits of any kind as a condition of employment.

ABOUT RIGHTWAY:

Rightway is on a mission to harmonize healthcare for everyone everywhere. Our products guide patients to the best care and medications by inserting clinicians and pharmacists into a patients care journey through a modern mobile app. Rightway is a front door to healthcare giving patients the tools they need along with on-demand access to Rightway health guides human experts that answer their questions and manage the frustrating parts of healthcare for them.

Since its founding in 2017 Rightway has raised over $205mm from investors including Khosla Ventures Thrive Capital and Tiger Global. Were headquartered in New York City with satellite offices in Denver and Dallas. Our clients rely on us to transform the healthcare experience improve outcomes for their teams and decrease their healthcare costs.

HOW WE LIVE OUR VALUES TO OUR TEAMMATES:

Were seeking those with passion for healthcare and relentless devotion to our goal. We need team members that embody our following core values:

1) We are human first
Our humanity binds us together. We bring the same empathetic approach to every individual we engage with whether it be our members our clients or each other. We are all worthy of respect and understanding and we engage in our interactions with care and intention. We honor our stories. We listen toand heareach other we celebrate our differences and similarities we are present for each other and we strive for mutual understanding.

2) We redefine what is possible
We always look beyond the obstacles in front of us to imagine new solutions. We approach our work with inspiration from other industries other leaders and other challenges. We use ingenuity and resourcefulness when faced with tough problems.

3) We debate then commit
We believe that a spirit of open discourse is part of a healthy culture. We understand and appreciate different perspectives and we challenge our assumptions. When working toward a decision or a new solution we actively listen to one another approach it with a yes and mentality and assume positive intent. Once a decision is made we align and champion it as one team.

4) We cultivate grit
Changing healthcare doesnt happen overnight. We reflect and learn from challenges and approach the future with a determination to strive for the face of daunting situations we value persistence. We embrace failure as a stepping stone to future success. On this journey we seek to act with guts resilience initiative and tenacity.

5) We seek to delight
Healthcare is complicated and personal. We work tirelessly to meet the goals of our clients while also delivering the best experience to our members. We recognize that no matter the role or team we each play a crucial part in our members care and take that responsibility seriously. When faced with an obstacle we are kind respectful and solution-oriented in our approach. We hold ourselves accountable to our clients and our members success.

Rightway is Proudly an Equal Opportunity Employer that believes in strength in the diversity of thought processes beliefs background and education and fosters an inclusive culture where differences are celebrated to drive the best business decisions possible. We do not discriminate on any basis covered by appropriate law. All employment is decided on the consideration of merit qualifications need and performance.