Hybrid (3 days onsite: tuesday, wednesday, thursday)
Enterprise security risk management program
Ai risk management
Third-party vendor security risk
Grow Therapy is seeking a Security Risk Program Manager to enhance their security risk management framework, focusing on protecting patients, providers, and employees in the mental healthcare sector. The ideal candidate will have extensive experience in security management within healthcare and strong communication skills to influence stakeholders
Job Summary
Build and mature Grow's enterprise security risk management program, including risk identification, assessment, prioritization, remediation tracking, and maintaining a comprehensive risk register.
Lead the charge on AI risk management, influencing safe and thoughtful adoption of AI tooling at the enterprise level.
Develop and deliver executive-level risk reporting and readouts that translate technical and security risks into clear business impact.
Matching Summary
Match Score: 85
Grow Therapy is seeking a Security Risk Program Manager to enhance their security risk management framework, focusing on protecting patients, providers, and employees in the mental healthcare sector. The ideal candidate will have extensive experience in security management within healthcare and strong communication skills to influence stakeholders.
Salary
Base: $152,000–$189,750 USD Annually; Bonus/Equity: Not specified; Benefits: Comprehensive Health Coverage, Parental Leave, 401(k), Equity Opportunities, Flexible PTO
Skills & Requirements
Must-have
Enterprise security risk management program
AI risk management
Third-party vendor security risk
Audit readiness and external certifications
Executive-level risk reporting
Nice-to-have
Scaling risk programs at high-growth companies
Familiarity with GRC tooling
Key Requirements
Building and operating security or enterprise risk management programs
Healthcare security, privacy, and compliance frameworks (HIPAA, SOC 2, HITRUST)
Stakeholder management and communication skills
Structured approach to prioritization, documentation, and cross-functional alignment