Security & Privacy Architect

Are you passionate about securing sensitive information, ensuring the integrity of critical systems, and finding creative and captivating ways to instill that mindset into a company's culture? Turquoise Health is seeking a dynamic and experienced Security & Privacy Architect to join our team as the first individual to hold this position. In this role, you will play a crucial part in designing... building, and implementing robust security and privacy measures to safeguard our organization's data and systems. For this remote job, we are looking for an individual with an entrepreneurial, inquisitive mind, who is willing to dig in deep and blaze a path in this realm. You'll have a knack for being five steps ahead of the game and a keen ability to explain complex security and privacy topics to stakeholders. We're looking for someone who isn't afraid to roll up their sleeves and work to further our mission of eliminating the financial complexity of healthcare.
We strongly encourage BIPOC, people with disabilities, and LGBTQIA+ folks to apply for any open roles of interest. Building a truly diverse team is a challenge that we do not shy away from. Healthcare affects all people differently, but it significantly affects those in underserved communities. With a robust, diverse team, we are stronger and better equipped to change the future of healthcare for all.
Responsibilities
As a Security & Privacy Architect, you'll??Most of the time:
??Build out a culture of information protection, data privacy, and compliance at TQ with policies, training, and resources to instill a protective mindset in all employees
??Audit, assess, and continually monitor all handling of sensitive customer data, and how we control TQ's use of customer output/materials in our platform
??Manage the architecture of our security infrastructure and information pathways, both internally and with our outside partners
??Lead compliance with all technical components of HIPAA, CCPA, CPRA, SOC2, and any other rules that apply to us or certifications we may take on in the future
??Provide front-line support for customer diligence requests: assessments, attestations, and audits.
??Assist with all technical needs as we work to bring customers into our ecosystem (i.e., VPN, SSO, etc.)
Some of the time:
??Develop and own our approach to MDM and security of all employee equipment
??Be a shared resource for leadership and other departments. You will provide security and privacy guidance for company data, customer materials, and all of our system infrastructure
??Monitor compliance with local, state, and federal government privacy regulations and requirements
Every now and then:
??Conduct periodic in-depth audits and vulnerability tests, make recommendations for any areas of concern
Requirements
What you bring to the Security & Privacy Architect role:
??5+ years of hands-on experience in the cybersecurity industry or with technology consulting working directly on security and privacy initiatives in the healthcare sector.
??Self-starter approach with a drive to create, build, and roll out resources designed to protect the company.
??Foresight and background enabling you to contour a security and privacy program that is appropriate for a company at our stage, and inspire rapid adoption and adherence by all teams.
??Experience bringing organizations into compliance with SOC2 and HITRUST standards.
??You have proven technical skills including familiarity or direct technical experience with identity and access management, data protection, and vulnerability management technologies, as well as experience with Health System IT Architectural Review and Cybersecurity Review workflows
??In-depth knowledge of data privacy, regulation, and compliance in the commercial and consumer spaces, including HIPAA, CCPA, and CPRA.
??An ability to quickly learn the business's infrastructure and guide stakeholders.
??An analytical mind with strong strategic ability, excellent organizational approach to complex tasks, and an ability to make topics understandable for all levels.
??You have a passion for cybersecurity and stay up to date on the latest developments and trends.
??A knack for making thoughtful, actionable recommendations and quickly building consensus with senior-level internal and external stakeholders.
??Communication and collaboration skills across seniority levels and functions.
Salary
The salary range for this full-time position is $130,000 - $160,000. Our salary ranges are determined by role and level and reflect the minimum and maximum salary across all US locations (please note: salaries are location agnostic). Within the range, individual pay is determined by factors including job-related skills, experience, and relevant education or training. We will talk about compensation in our first conversation and be transparent throughout the process about which level we think is the best match for you in our organization. Please note that the salary range does not reflect total compensation, which includes base salary, benefits, and company stock options.
Benefits
??Competitive pay with equity options
??Stellar health care plan options (Medical, Dental & Vision)
??Unlimited PTO
??401K + 4% Matching
??Fully remote work + $750 work-from-home stipend + paid quarterly remote co-working weeks
??Monthly health and wellness benefit
??Generous family leave
??Annual $1,200 Learning & Development Benefit
About Turquoise Health
At Turquoise, we're making healthcare pricing simpler, more transparent, and lower cost for everyone. Have you or a family member ever gotten an MRI, a lab, or even a straightforward surgery without knowing the cost in advance? That's bonkers, right? We're working to fix that.
We're a Series B startup backed by top VCs a16z, Box Group, Bessemer Venture Partners, Tiger Global, Adams Street, and Yosemite. Most importantly, we're an accomplished group of folks (moonlighting as authors, bass players, improv instructors, chefs, linguists, and trivia buffs) with a passion for improving healthcare. We're eager to find ambitious and well-rounded teammates to join us on this mission.
Job Location
Turquoise Health is a fully remote company based in the US. We work with team members and contractors in the US and around the world, but we operate on US business hours and work with clients entirely based in the US. For this role, we are seeking US-based candidates.
Disability Accommodation Email
Turquoise Health is committed to providing reasonable accommodations to applicants and employees with disabilities. Please tell us if you require a reasonable accommodation to apply for a job or to perform your job. Examples of reasonable accommodation include making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment. If you require assistance or an accommodation with the hiring process, please contact recruiting@turquoise.health

Apply Job!