{"id":1161830,"url":"https://alion.io/job/familywell-security-compliance-manager","title":"Security & Compliance Manager","company":{"id":673290,"name":"Familywell","domain":"familywell.co","url":"https://alion.io/company/familywell","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Management","role_family":"Management","seniority":"senior","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":132000,"max":140000,"currency":"USD","period":"year","gross":null,"usd_annual":140000},"salary_estimate":null,"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Claude","optional":false},{"name":"HIPAA","optional":false},{"name":"SOC 2","optional":false},{"name":"DLP","optional":true},{"name":"Google Workspace","optional":true},{"name":"Vault","optional":true}],"status":"live","first_seen_at":"2026-09-23T17:06:34Z","employer_posted_date":"2026-09-23","last_verified_at":"2026-09-25T18:59:03Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"FamilyWell Health is an AI-enabled mental health startup dedicated to addressing the women’s mental health crisis by seamlessly embedding high-quality, equitable, and affordable mental health care into women’s health practices and health systems. Our comprehensive virtual care model delivers evidence-based mental health services across the full reproductive lifecycle, from fertility through menopause, using the proven Collaborative Care Model (CoCM).\nOur AI-enabled platform integrates coaching, therapy, psychiatry, and care coordination services directly into clinical workflows, making mental health care accessible, affordable, and insurance-covered. With 95% of patients experiencing clinical improvement within four months, FamilyWell is addressing one of healthcare’s most underserved areas while building a financially sustainable model for provider partners.\nFollowing our recent Series A raise, we are expanding nationally and seeking exceptional talent to join our mission-driven team. Learn more at www.familywellhealth.com.\nFamilyWell is scaling a HIPAA-regulated, AI-enabled care platform, and our security program has outgrown what our CPO and contractor CISO can manage day-to-day. We're hiring a Security & Compliance Manager to own the operational backbone of our security and compliance program - running the security calendar, tracking risk assessment and pentest remediation to closure, managing vendor/BAA risk, and building toward a formal compliance certification (SOC2 or HITRUST, timing dependent on feasibility). You'll work closely with our CPO (Security Officer) and our contractor CISO, who will continue to own governance, sign-off, and board-level risk reporting, while you own the day-to-day execution that makes that reporting possible.\nKey Responsibilities & Duties\nOwn day-to-day management of the security program: Security Risk Assessment (SRA) cadence, penetration test coordination and remediation tracking, phishing simulations, and the annual security awareness training calendar.\nDraft Policies & Procedures (P&Ps) for CISO and leadership review/approval, and keep documentation current as the org and regulatory landscape evolve (e.g., the 2025 HIPAA Security Rule overhaul).\nLead vendor security assessments and Business Associate Agreement (BAA) audits across FamilyWell's vendor ecosystem.\nOwn MDM/BYOD device compliance monitoring, partnering with the IT Systems Administrator and our MSP on enrollment and endpoint security status.\nServe as day-to-day lead on incident/breach response, escalating to the CPO and contractor CISO per FamilyWell's response plan.\nSupport rollout of identity and access management improvements, including SSO and a company-wide password manager.\nPartner with the CPO and contractor CISO to prepare recurring board-level risk and compliance status reporting, including a forward-looking roadmap.\nOwn compliance-automation tooling evaluation and rollout (e.g., Drata or Vanta) as FamilyWell works toward a SOC2 or HITRUST-ready posture.\nTrack open items from SRAs, audits, and vendor reviews to closure (e.g., encryption gaps, audit-log access, policy sign-off) using FamilyWell's Security Program Tracker.\nHelp define and maintain AI security guardrails (e.g., PHI handling policy for Claude/Cowork and other AI tools) as the platform and AI usage scale.\nMaintain detailed documentation and records of all security program controls, risks, incidents, vendor audits, and roadmap initiatives.\nMinimum Qualifications\n3-6+ years of experience in security compliance, IT security, or GRC (governance, risk, and compliance) roles.\nDirect experience with HIPAA Security Rule requirements, Security Risk Assessments, and vendor/BAA risk reviews - ideally in healthcare or another regulated industry.\nComfortable running a security calendar and tracking remediation items to closure across multiple stakeholders.\nExperience partnering with a fractional or contractor CISO, MSP, or outside security advisor, and translating technical risk into clear, non-technical reporting for leadership or a board.\nStrong documentation and project management habits.\nAbility to work independently in a fast-paced, remote startup environment.\nNice-to-Haves\nDirect experience preparing for or achieving SOC2 or HITRUST certification.\nFamiliarity with compliance automation platforms (Drata, Vanta, or similar).\nExperience with MDM/endpoint tools, Google Workspace security controls (DLP, Vault), and password manager rollouts.\nExperience in an early-stage or high-growth startup, comfortable building process from scratch.\nFamiliarity with AI governance/security considerations for tools used with PHI.\nCompensation Range: $132,000-$140,000","description_format":"text","description_chars":4696,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-09-24T00:09:17Z"}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":1,"expected_fill_days":34,"reasons":["conf:0","win:early"],"computed_at":"2026-09-25T05:45:01Z"},"pay":{"stated_usd_annual":140000,"is_top_pay":false},"html_url":"https://alion.io/job/familywell-security-compliance-manager","json_url":"https://alion.io/job/familywell-security-compliance-manager.json","meta":{"generated_at":"2026-09-26T00:16:53Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":205,"day_limit":5000,"remaining_today":4795,"minute_limit":60,"resets_at":"2026-09-27T00:00:00Z"}}}