Senior/Staff TPM, Security Risk

About the role

The Security Risk Program Manager will build and mature Grow Therapy's security risk program, focusing on risk identification, assessment, prioritization, and remediation. They will drive audit readiness, shape executive risk reporting, and partner with various departments to ensure security is embedded in decision-making.

Responsibilities

• Build and mature Grow's enterprise security risk management program
• Lead AI risk management initiatives within the Internal Foundations pillar
• Own third-party/vendor security risk management, streamlining review workflows
• Drive audit readiness and external certifications (SOC 2, HIPAA-aligned assessments, HITRUST readiness)
• Develop and deliver executive-level risk reporting
• Partner with Security Engineering, Product, Engineering, and Operations to embed security and risk awareness

Requirements

• Deep experience building and operating security or enterprise risk management programs
• Strong knowledge of healthcare security, privacy, and compliance frameworks (HIPAA, SOC 2, HITRUST)
• Exceptional stakeholder management and communication skills
• Structured approach to prioritization, documentation, and cross-functional alignment

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field
• Minimum 5 years of experience in security or risk management roles
• Experience with HIPAA, SOC 2, and HITRUST frameworks
• Experience with GRC tooling and automation

Skills

• Strong analytical and problem-solving skills
• Excellent stakeholder management and communication skills
• Ability to prioritize and manage multiple projects simultaneously
• Experience with risk assessment methodologies and tools

Benefits

• Comprehensive health coverage
• Parental leave and family support
• Financial wellness programs
• Meals and home office support
• Flexible PTO and holidays
• Annual stipends for personal and professional development
• Mental and physical health support
• Pet insurance discounts
• Commuter benefits
• Global travel assistance

Pay

The base compensation range for this position is $152,000–$189,750 USD Annually. The base compensation varies based on relevant experience, qualifications, and the candidate's working location.

Schedule

This is a hybrid role with the expectation to work onsite from our NYC or San Francisco hubs three days per week (Tuesday, Wednesday, and Thursday), and travel 2–3 times per year (e.g., company and department offsites).