Alma

Senior Security Governance Risk & Compliance (GRC) Analyst

United States

Alma Logo
Not SpecifiedCompensation
Senior (5 to 8 years)Experience Level
Full TimeJob Type
UnknownVisa
Healthcare, Mental Health, HealthTech, Software & TechnologyIndustries

Requirements

Candidates should possess 5+ years of work experience in Information Security, specifically within a Governance, Risk, and Compliance (GRC) analysis role, and experience working in highly regulated industries such as health tech, banking, or insurance. They should have demonstrated experience leading SOC 2 audits and/or HITRUST certifications with minimal findings, along with experience deploying GRC solutions like Drata or similar unified control frameworks.

Responsibilities

The Senior Security GRC Analyst will perform risk assessments and generate reports on Alma’s risk management program, collaborate with stakeholders to identify and implement mitigating controls, streamline and maintain Alma’s security policies and standards, prepare the organization for annual audits and certifications including SOC 2 and PCI, educate Alma’s staff by developing and managing a security awareness program, develop and maintain a vendor risk program ensuring vendor compliance with Alma security standards, and develop and measure key metrics related to cybersecurity priorities.

Skills

Risk Assessments
Security Policies
Security Controls
Audit Preparation
SOC 2
HITRUST
Security Governance
Risk Management

Alma

Digital platform connecting clients with therapists

About Alma

Alma connects individuals seeking mental health services with a variety of therapists through its digital platform, helloalma.com. The platform primarily serves clients looking for therapy for issues like anxiety, depression, personal growth, and relationship challenges. Alma's approach focuses on making therapy more affordable by partnering with insurance companies, allowing clients to save an average of 77% on therapy costs. This affordability is a key aspect that sets Alma apart from other mental health services. Additionally, Alma supports therapists by offering resources for continuing education and professional development, ensuring they are well-prepared to assist their clients. The company emphasizes the importance of the client-therapist relationship, aiming to match clients with therapists who best meet their individual needs. Alma operates on a membership model, where therapists pay a fee to access the platform's resources and client base.

Key Metrics

New York City, New YorkHeadquarters
2018Year Founded
$214.5MTotal Funding
SERIES_DCompany Stage
HealthcareIndustries
1,001-5,000Employees

Benefits

Remote Work Options
Health Insurance
Dental Insurance
Vision Insurance
401(k) Retirement Plan
Wellness Program
Home Office Stipend
Parental Leave
Paid Holidays
Unlimited Paid Time Off

Risks

Increased competition from platforms like Headway and SonderMind could impact Alma's market share.
Rapid expansion to 8,000 providers may challenge service quality and support.
Regulatory changes in telehealth reimbursement policies could affect Alma's business model.

Differentiation

Alma partners with insurance companies to make therapy more affordable for clients.
The platform offers a comprehensive suite of tools for therapists, including scheduling and billing.
Alma emphasizes client-therapist matching to ensure personalized and effective therapy sessions.

Upsides

Alma raised $130 million in Series D funding to expand its platform and services.
The decreasing stigma around mental health is increasing demand for Alma's services.
Alma's integration of AI can enhance client-matching algorithms and service delivery.

Land your dream remote job 3x faster with AI