Maven Clinic
Senior Manager, GRC
Remote role where the employee must remain based in a particular country.
United States only
Employer listed it 2 weeks ago · Added yesterday
Been open since 2 weeks ago, still being checked, but it has been live a while.
Salary
$170k to $201k per year
Location
United States only
Timezone
US East
Contract
Full-time
Experience
Senior
Category
Other
Stated by the employer in the job description
Remote flexibility
Work from home
This is a remote role, but the employee must be based in United States. It is work from home rather than work from anywhere.
What the employer says
- Source listing states candidate location: "New York, New York, United States; New York, NY; Remote, US (Hub cities), New York, NY"
- Job description states: "based in Boston"
What Nomaders makes of it
- Payroll and tax are likely handled in that country only
The quotes above are the employer's own words; the reading is ours. Always check the original listing and employment terms before working from another country.
About the role
Maven Clinic is the world's largest virtual clinic for women and families on a mission to make healthcare work for all of us. Through Maven Enterprise, the company partners with more than 2,300 employers and health plans to provide end-to-end women's and family health programs spanning fertility and family building, maternity and newborn care, parenting and pediatrics, and menopause and midlife — improving clinical outcomes, reducing healthcare costs, and expanding equitable access to high-quality care at scale. Through its consumer platform, Maven provides direct access to virtual care across 30+ specialties, as well as dedicated hormone and GLP-1 care programs purpose-built for women. Founded in 2014 by CEO Kate Ryder, Maven Clinic has raised more than $425 million from leading healthcare and technology investors including General Catalyst, Sequoia, Dragoneer Investment Group, Oak HC/FT, StepStone Group, Icon Ventures, and Lux Capital. Recognized for innovation and industry leadership, Maven has been named to the TIME100 Most Influential Companies, CNBC Disruptor 50, Fast Company's Most Innovative Companies, and FORTUNE Best Places to Work. Learn more at mavenclinic.com
An award-winning culture working towards an important mission – Maven Clinic is a recipient of over 30 workplace and innovation awards, including:
TIME 100 Most Influential Companies (2023, 2026)
Fortune Change the World (2024)
CNBC Disruptor 50 List (2022, 2023, 2024)
Fortune Best Workplaces for Millennials (2024)
Fortune Best Workplaces in Health Care (2024)
Fast Company Most Innovative Companies (2020, 2023)
Fortune Best Workplaces NY (2020, 2021, 2022, 2023, 2024)
About the Role:
We're looking for a GRC Manager to own governance, risk, and compliance for our B2B health benefits platform. You'll act as the team lead for our GRC function, working closely with one other team member to run audits, write policies, answer RFIs, and monitor controls day to day.
This role touches almost every team: partnering with Engineering, IT, and HR to gather evidence and close gaps; working directly with customers and their security teams during due diligence; and managing auditor relationships through certification cycles. You'll also bring solid project management skills, sequencing audits, tracking remediation, and hitting deadlines across multiple concurrent workstreams. You'll report directly to the CISO/Head of Security and act as the organization's primary voice on compliance posture. You will interface internally and externally with customers, auditors, and partners.
Our platform facilitates virtual health visits for employer-sponsored benefits, which means security, privacy, and compliance are core to customer trust and our ability to sell into enterprise and health-plan accounts.
What You'll Do:
External Audit & Certification Management
Own continuation and renewal of our SOC 2 (Type II) and HITRUST certifications end-to-end. You'll scope each cycle, pull evidence, work directly with auditors, and track remediation through to the final report.
Lead the ground-up establishment of ISO 27001 and ISO 42001 certification programs. That means gap assessments, control mapping, writing ISMS/AIMS policies and statements of applicability, gaining cross team buy in, and getting us ready for initial certification audits.
Manage the annual/ongoing audit calendar across all frameworks, coordinating with internal stakeholders (Engineering, IT, HR, Legal) to gather evidence and close findings on time.
Track regulatory and framework changes (HIPAA, state privacy laws, ISO updates) and translate them into control updates.
Customer-Facing Security & Compliance
Serve as the primary owner of security questionnaires and RFIs/RFPs for the Sales and Customer Success teams. Ensure responses to prospect and customer’s due-diligence requests are accurate and on deadline.
Maintain a security knowledge base / answer library to reduce turnaround time on recurring questions.
Partner with Sales Engineering and Account teams to represent our security and compliance posture directly in customer calls when needed. You'll join customer calls directly when security is a blocker in the deal.
Manage relationships with customers' internal security/compliance teams during onboarding and renewal cycles.
Requirements
- ·6+ years of experience in GRC, information security compliance, or IT audit, with direct ownership of at least one SOC 2 or similar audit cycle from start to finish.
- ·Working knowledge of SOC 2, HITRUST, and ISO 27001 frameworks hands-on .
- ·Experience responding to customer security questionnaires/RFIs, ideally in a B2B SaaS or healthcare-adjacent environment.
- ·Strong cross-team collaboration skills. You'll regularly work with Engineering, IT, HR, Legal, and Sales to gather evidence, close control gaps, and keep everyone aligned on deadlines.
- ·Solid project management instincts: able to sequence overlapping audits and certification projects, track dependencies and remediation items, and hit dates without needing someone else to manage the plan for you.
Benefits
- ·Maven for Mavens: access to the full platform and specialists, including care for mental health, reproductive health, family planning and pediatrics.
- ·Whole-self care through wellness partnerships
- ·Hybrid work, in office meals, and work together days
- ·16 weeks 100% paid parental leave and new parent stipend (for Mavens who've been with us for 1 year+)
- ·Annual professional development stipend and access to a personal career coach through Maven for Mavens
How to apply
- 1Check the flexibility label above, work from home, matches where you plan to live and work.
- 2Tailor your CV to the role at Maven Clinic, mentioning your remote working experience and working hours (US East).
- 3Apply directly on the employer's careers page using the button below. Nomaders never handles your application.
Found 1d ago. Last checked 23 Sept. Always confirm the details on the original posting, salary and location can change after publication.
Listing sourced from Company boards.
Similar roles
Other open other roles with comparable remote rules.
Free to apply, no account needed.
$170k to $201k per year · You'll be taken to the employer's careers page.