Headway

Senior Governance, Risk, Compliance (GRC) Analyst

San Francisco, CA · Senior

Sponsorship not specified$162k-$202kDetected 68 days ago

SparkComplianceProcurementHIPAACommunication

About the role

Headway handles sensitive health data for millions of patients - and that responsibility demands a security and compliance program that scales with the business.
You'll join the Security team and work across four pillars: security certifications (HITRUST, SOC 2, PCI-DSS, HIPAA), third-party risk management, security awareness training, and technical risk management.
Stand up and run Headway's security awareness training program - onboarding modules, phishing simulations, annual compliance training, and completion tracking.

Support HITRUST, SOC 2, PCI-DSS, and HIPAA audit readiness - collecting evidence, coordinating with assessors, tracking control gaps and remediation timelines.
Build and manage the vendor security assessment lifecycle - questionnaires, SOC 2/ISO reviews, risk scoring, and policy enforcement across procurement and renewals.
You've used a GRC platform like Vanta, Drata, OneTrust, or similar to automate evidence collection or manage controls.
Build from scratch - you're standing up Headway's GRC function, not inheriting legacy processes.

You have 5+ years of experience in a GRC, compliance, or security risk role.
You have working knowledge of at least two of: HITRUST, SOC 2, PCI-DSS, or HIPAA.

Real risk mitigation - this isn't checkbox compliance
Forward-thinking healthtech - Headway is investing in AI-enabled security workflows and modern GRC tooling, not spreadsheet-driven compliance.

The admin work - credentialing, claims, payment reconciliation - is a nightmare.
Over 75,000 providers across all 50 states run their practice on our software, serving over 1 million patients.
Join us, and help change mental healthcare for the better.

The expected base pay range for this position is $161,600 to 202,000 based on a variety of factors including qualifications, experience, and geographic location.

Equity compensation
Medical, Dental, and Vision coverage
Work-from-Home Stipend
Therapy Reimbursement
16-week parental leave for eligible employees
Carrot Fertility annual reimbursement and membership
13 paid holidays each year as well as a Holiday Break during the week between December 25th and December 31st
In addition to base salary, this role may be eligible for an equity grant, depending on the position and level.
We are committed to offering a comprehensive and competitive total rewards package, including robust health and wellness benefits, retirement savings, and meaningful ownership opportunities through equity.

You won't be maintaining a stale compliance program - you'll be building a modern, AI-enabled one at a company that's transforming how mental healthcare is delivered in the United States.

This listing is sourced directly from Headway's careers page and normalized into a canonical job model.