Sr. Staff Risk Management Analyst (Cybersecurity)

Location: United States - Remote

Company

hirify.global is a pre-IPO telehealth company providing virtual care delivery and support solutions across all 50 states.

What you will do

• Own and mature the enterprise risk register, risk appetite statement, ERM policy, and enterprise risk assessment methodology.
• Run risk assessments, assign and monitor risk owners, and report enterprise risk posture to executives and the Enterprise Risk Committee.
• Govern the security program portfolio, OKRs, dependencies, and multi-year risk-reduction roadmap.
• Produce governance and risk-assessment evidence for SOC 2, HITRUST, HIPAA, NIST CSF 2.0, and related control frameworks.
• Own the security awareness program and manage property and casualty insurance renewals, claims, certificates, audits, and customer contract requirements.
• Extend second-line risk coverage across pharmacy, financial, clinical, and third-party risk, while automating register maintenance, assessment intake, evidence gathering, and reporting.

Requirements

• 10+ years of experience in information security, risk management, or GRC.
• Demonstrated ownership of a GRC or enterprise risk program, including registers, policies, and assessment methodology.
• Hands-on experience with RCSA or comparable enterprise risk assessments, multi-year risk-reduction roadmaps, and executive or board-level risk reporting.
• Experience working with SOC 2, HITRUST, HIPAA, NIST CSF, or comparable control frameworks.
• Ability to hold owners across other teams accountable without direct authority.
• Experience as the first full-time person dedicated to a function, operating without a team or dedicated budget.

Nice to have

• CRISC, CISA, CISSP, or equivalent certification.
• Healthcare experience involving sensitive data.
• Agentic AI systems for governance intake, evidence gathering, or reporting.
• Experience supporting SOC 2, HITRUST, or HIPAA assurance cycles.
• Experience building a security awareness program or administering a GRC platform.

Culture & Benefits

• Relatively flat organizational structure with autonomy to propose ideas and drive initiatives.
• Medical, dental, and vision plans.
• Flexible Spending Accounts and Health Savings Accounts.
• Flexible paid time off.
• 401(k) with company match, life insurance, pet insurance, and additional benefits.