Hinge Health

Hinge Health

Manager, Technology Risk

San Francisco-HQ · Senior

Sponsorship not specifiedDetected 42 days ago
Site Reliability EngineeringCybersecurityComplianceAccountingHIPAALeadershipCommunication

About the role

  • The Technology Risk Manager is a senior individual contributor responsible for driving Hinge Health's technology risk posture across security, infrastructure, and IT.
  • You'll act as the primary owner for technology risk across multiple teams rather than as a pure advisor.

Responsibilities

  • Maintain and continuously refine the Technology Risk Register, documenting cyber, operational, and regulatory risks with clear ratings, owners, and mitigation plans.
  • Track and drive remediation progress across engineering and IT teams, escalating and unblocking as needed to ensure risk treatment plans meet agreed SLAs.
  • Partner with Application Security, SRE, and Infrastructure teams to aggregate, prioritize, and track code vulnerabilities, penetration-testing findings, and infrastructure risks across the SDLC.
  • Drive consistent, high-quality documentation of risk decisions, mitigations, and compensating controls.
  • Design and maintain risk and control dashboards that provide senior leadership with clear insight into security posture, compliance status, and remediation velocity.

Requirements

  • Proven track record as a senior IC leading complex, cross-functional risk or compliance programs with high visibility to engineering and IT leadership.
  • Deep experience with SOX IT General Controls (design, testing, and remediation) in cloud-first environments.
  • Strong understanding of access management, change management, computer operations, and related control frameworks.
  • Comfort working in PHI-handling or similarly sensitive data environments.
  • Demonstrated ability to influence senior engineering and IT stakeholders: you can surface uncomfortable risks, keep discussions anchored in facts and impact, and help teams arrive at well-documented decisions.
  • 2+ years of experience in technology risk, IT audit, cybersecurity, or information security, with recent, hands-on in SOX-driven or heavily regulated environments (e.g. public/pre-IPO, company, Big 4 IT audit/risk advisory, financial services or healthcare).
  • Excellent relationship-builder who balances assertiveness with partnership-able to challenge, negotiate trade-offs, and still maintain trust.
  • Exceptional written and verbal communication skills
  • you distill complex technical risk into concise, executive-ready narratives and clear action plans.

Nice to have

  • Certifications such as CISA, CISSP, or equivalent.
  • Prior Big 4 (or similar) experience in IT audit, SOX, or technology risk.
  • Experience with SOX IT General Controls and broader security frameworks.
  • Physical demands are minimal and primarily involve standard office activities such as sitting, typing, and video conferencing.
  • The platform addresses a broad spectrum of MSK care - from acute injury, to chronic pain, to post-surgical rehabilitation - through personalized, evidence-based care.
  • The company is headquartered in San Francisco with additional offices in Montreal and Bangalore.
  • Learn more at http://www.hingehealth.com
  • We also consider qualified applicants regardless of criminal histories, consistent with legal requirements.

Benefits

  • Planning for the future: Start saving for the future with our traditional or Roth 401k retirement plan options which include a 2% company match.
  • Modern life stipends: Manage your own learning and development
  • Grow with us through discounted company stock through our ESPP with easy payroll deductions.
  • Hinge Health is an
  • At Hinge Health, we're using technology to scale and automate the delivery of healthcare - starting with musculoskeletal (MSK) conditions, which affect over 1.7 billion people worldwide.
  • Partner with Security, Accounting, Legal/Compliance, and IT to ensure risk and control practices support HIPAA and other healthcare regulatory requirements.
  • Recommend and refine KPIs/KRIs that measure technology risk, SOX ITGC health, and vulnerability reduction over time.

Equal opportunity

  • equal opportunity employer and prohibits discrimination and harassment of any kind.
  • If you feel you need assistance or an accommodation due to a disability, let us know by reaching out to your recruiter.
Apply directly at Hinge Health →Create a free account for alerts like thisView Hinge Health immigration profile

This listing is sourced directly from Hinge Health's careers page and normalized into a canonical job model.