Grow Therapy

Senior/Staff TPM, Security Risk

San Francisco · Staff+ · Full-time

Sponsorship not specified$152k-$190kDetected 126 days ago

CybersecurityComplianceAccessibilityStakeholder ManagementValuationHIPAAResearchLeadershipCommunication

About the role

We are looking for a Security Risk Program Manager to take Grow Therapy's security risk program to the next level of maturity.
Reporting directly to the Head of Security, you'll be part of a team focused on protecting Grow's patients, providers, employees, and business by embedding risk awareness into everyday decision-making.

Build and mature Grow's enterprise security risk management program, including risk identification, assessment, prioritization, remediation tracking, and maintaining a comprehensive risk register that informs business decisions.
Lead the charge on AI risk management: Security sits within Grow's Internal Foundations pillar, which is building company-wide infrastructure to support AI adoption.
Own the third-party/vendor security risk management program, streamlining review workflows to support business velocity while ensuring robust security oversight of partners and vendors.
Drive audit readiness and external certifications (SOC 2, HIPAA-aligned assessments, HITRUST readiness) in close partnership with Legal and Compliance, reducing repeat findings and improving remediation timelines.
Develop and deliver executive-level risk reporting and readouts that translate technical and security risks into clear business impact, enabling leadership to make informed, risk-aware tradeoffs as the company scales.
Partner proactively across Security Engineering, Product, Engineering, and Operations to embed security and risk awareness into planning and decision-making cycles-positioning security as a strategic enabler rather than a gatekeeper.

You have exceptional stakeholder management and communication skills, including a track record of influencing senior leaders and translating complex risk concepts into actionable business guidance.
You are a strong program manager with a structured approach to prioritization, documentation, and cross-functional alignment.

Experience scaling risk programs at high-growth or pre-IPO tech companies, prior ownership of vendor risk programs, or familiarity with GRC tooling and automation.

The base compensation range for this position is $152,000-$189,750 USD Annually.
The base compensation for this role will vary depending on several factors, including relevant experience, qualifications, and the candidate's working location.

Pet insurance discounts, commuter benefits, and global travel assistance.
We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status.
Comprehensive Health Coverage: Medical, dental, and vision insurance, plus life and disability coverage.
Parental Leave & Family Support: Up to 18 weeks paid leave and a new child stipend.
Financial Wellness: 401(k) program and equity opportunities.
Time Off to Recharge: Flexible PTO, 12 paid holidays, and a full winter break week.
Wellness & Development: Annual stipends to put towards personal & professional growth.
Meals & Home Office Support: Stipends for home office setup and ongoing funds for meals, with tailored perks for both remote and in-office employees.

At Grow, we value diverse experiences, transferable skills, and the unique strengths each person brings.
Use of AI Tools: By submitting your application, you acknowledge and consent to the use of automated tools as part of our recruitment process.

al employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status

This listing is sourced directly from Grow Therapy's careers page and normalized into a canonical job model.