Senior Security Engineer I - GRC

As a Senior Security Engineer I at Aledade, we play a central role in helping secure our enterprise, cloud native environments, and applications. We’re looking for a security GRC engineer that understands that governance, risk, compliance, privacy, data protection, industry frameworks & best practices, and regulatory requirements are important ingredients to our mission. 
Beyond GRC and technical expertise, your efforts will support protecting patients, our employees, and Aledade as a whole. Our technology saves lives and improves the mental and physical health for millions of people. At Aledade, we empower primary care physicians with technology to keep their patients healthy, preventing unnecessary hospitalizations.

Primary Duties:

• Working cross-functionally to measure & report on risk, achieve & maintain compliance, manage assessments/audits, and contribute to security GRC strategy & advisory efforts
• Leveraging data to understand trends, metrics, and opportunities to improve our security posture and then helping execute on those opportunities with stakeholders
• Leading and enhancing risk management efforts, spearheading qualitative risk assessments & quantitative risk analysis, responsible for third party risk management (TPRM), and participate in mitigation strategies in a cross-functional environment to ensure effective resolution and remediation of security risks / issues
• Helping craft and refine security documentation pertinent to our Security Program, such as policies, standards, baselines, and standard operating procedures

Minimum Qualifications:

• BS / BTech (or higher) in Computer Science, Information Technology, Cybersecurity or a related field, 6 years security domain experience without degree
• 4+ years combined experience as a GRC specialist in an enterprise environment (preferably cloud) across multiple disciplines
• 3+ years of relevant work experience in risk reporting, developing & collecting metrics, and working on audits/assessments
• 2+ years of experience in performing third party risk management activities

Preferred KSA’s:

• Security specific and/or related certifications (e.g. CISSP, CISA, CRISC, CDPSE, CIPP, GIAC, AWS certifications)
• Knowledge of security frameworks, controls, regulations and industry best practices (e.g. NIST, ISO, SOX ITGC, HIPAA, HICP, CCPA/CPRA)
• Experience in participating in and leading security GRC projects for a dynamic organization with demonstrated project management skills and driving accountability for meeting deliverables within established timelines
• Significant familiarity with metrics (e.g. KRI, KPI, OKR) to measure security team service and program effectiveness & consistency
• Experience implementing, refining and managing the utilization of GRC solutions and related technology tools/software
• Knowledge & experience in risk quantification (e.g. FAIR) and associated reporting
• Solid understanding of enterprise security technology, appliances, and tools
• Experience with health-tech systems, like Electronic Health Records, Clinical data, etc.
• Knowledge of security technology and relevant security risks, controls, and vulnerabilities
• Collaborative work style; ability to develop and maintain effective working relationships both
• internal and external to the organization
• Experience facilitating meetings with high level, cross-functional teams
• Exceptional verbal, written and interpersonal communication skills 

Physical Requirements:

• Sitting for prolonged periods of time. Extensive use of computers and keyboard. Occasional walking and lifting may be required.

Who We Are:Aledade, a public benefit corporation, exists to empower the most transformational part of our health care landscape - independent primary care. We were founded in 2014, and since then, we've become the largest network of independent primary care in the country - helping practices, health centers and clinics deliver better care to their patients and thrive in value-based care. Additionally, by creating value-based contracts across a wide variety of payers, we aim to flip the script on the traditional fee-for-service model. Our work strengthens continuity of care, aligns incentives, and ensures primary care physicians are paid for what they do best - keeping patients healthy. If you want to help create a health care system that is good for patients, good for practices and good for society - and if you're eager to join a collaborative, inclusive and remote-first culture - you've come to the right place.
What Does This Mean for You?At Aledade, you will be part of a creative culture that is driven by a passion for tackling complex issues with respect, open-mindedness and a desire to learn. You will collabora