Peloton
Peloton is the leading interactive fitness platform globally, with a passionate community of over 6.9 million Members.
New York , NY
Hybrid

Senior Manager, Tech GRC, HIPAA Compliance

Sorry, this job was removed at 7:07 a.m. (EST) on Saturday, April 17, 2021
Find out who's hiring in Greater NYC Area.
See all Operations jobs in Greater NYC Area
Easy Apply
By clicking Apply Now you agree to share your profile information with the hiring company.

The Peloton Enterprise Technology Team is expanding and transforming its risk management, compliance and security capabilities and resources. We are investing in these areas to address an ever increasing cybersecurity threat landscape as well as expanding regulatory compliance requirements as the company continues to grow.  


The Technology Governance, Risk & Compliance (GRC) HIPAA Compliance Senior Manager role will be a critical position within the team and for the organization globally. Working closely with the Enterprise Technology, Software Engineering and Legal teams, as well as stakeholders across the organization, this position’s main responsibility will be to lead the design, build out and operation of a HIPAA compliant platform in an effort to raise the overall security and compliance posture of Peloton. This individual will be directly responsible for partnering with teams to implement the HIPAA Privacy, Security and Breach Notification Rules at an appropriate level of depth for the environment. The role will have strategy and design components, but will also be tactical and hands-on as well. The person will need to drive HIPAA specific risk management practices at the highest level and implement the approach to appropriately treat the risks. The person will need to understand HIPAA data privacy and security requirements in detail in order to appropriately translate and apply them to a highly agile and modern technology environment. The role will be customer-facing as well in order to communicate Peloton’s data privacy and security posture as part of business development.


In addition to the main focus on HIPAA, this person should also have experience working across multiple frameworks and regulatory standards including, but not limited to, NIST CSF, PCI DSS, GDPR/CCPA and SOX. This individual will need to work closely with teams across the organization to understand the control environment in place currently, how to leverage it and when new customized solutions and processes need to be implemented.


JOB DUTIES:


  • The role will be responsible for cross functional collaboration with Software Engineering, Legal, Internal Audit, and Security teams in designing and operating both the technical and programmatic dependencies of a HIPAA compliant environment.
  • Provide technical perspective and support on the architecture, infrastructure, and technology operations in place to manage health data risk. 
  • Under direction of GRC management, the role is responsible for leading the HIPAA compliance program and managing the associated projects efficiently.
  • Responsibility for informing leadership of issues resulting from risk analysis and determining potential solutions that are appropriate for Peloton’s business and system architecture.
  • Interacts with business and engineering stakeholders to understand risks to data by defining potential business impact with the responsibility to apply effective mitigation strategies.
  • Maintains updated healthcare industry and regulatory knowledge in the fields of privacy, security, risk management and compliance related to HIPAA
  • Understanding of core risk management principles, how to calculate risk levels, determine risk tolerances and develop appropriate risk treatment plans.
  • Effectively communicates our data privacy and security environment to new and existing commercial and health plan customers and capable of forging strong relationships with the risk teams of key customers.
  • Understanding of security functions including: Incident Management, Secure Change Management, Identity and Access Management, and Vendor Security Risk Management.
  • Stay current with healthcare industry, regulatory, and legal requirements relevant to security, compliance, and privacy.
  • Bring an innovative approach to continuously improving a risk management framework that can enable business velocity while adhering to a defense-in-depth design as regulations and risk footprints evolve.  


Requirements:


  • 10+ years of experience working in or with the healthcare industry or healthcare related products that require compliance with HIPAA
  • Strong technical knowledge of all aspects of the HIPAA regulation
  • Experience designing programs that effectively rightsize risk management controls across the relevant contexts of a distributed architecture
  • Experience leading an organization to become compliant with HIPAA and maintain ongoing operational compliance
  • Experience leading an organization through HITRUST readiness and obtaining the certification
  • Experience leading an organization through a SOC 2 + HIPAA audit
  • Experience as a HITRUST external assessor is a plus
  • Strong degree of comfort working alongside an agile software engineering team to provide governance over the design and architecture of systems to ensure ePHI is appropriately safeguarded
  • Experience tailoring communication and collaboration in an organization that utilizes both co-located and distributed teams
  • Experience with Business Development / Sales teams to communicate the company’s data privacy and security posture
  • Experience working with external legal partners and auditors
  • Familiar with GRC tools to track, operate and monitor a HIPAA program
  • Knowledge of JIRA and Confluence preferred
  • Experience working in a technology organization preferred
  • Experience in one or more of the following: SOX, GDPR/CCPA, NIST CSF, PCI DSS is preferred
  • One or more of the following certifications is preferred: CISA, CISSP, HITRUST CCSFP, CIPP, CIPM, CIPT


ABOUT PELOTON:


Founded in 2012, Peloton is an innovative tech company that brings members the best workouts possible, all from the convenience of their own home via the Bike,Tread and iOS App platforms. Peloton uses technology and design to connect the world through fitness, empowering people to be the best version of themselves anywhere, anytime.

Peloton believes in taking risks and challenging the status quo by continuously innovating and improving. We put our users, members, and customers first and we obsess over every touch point of the member experience – be it the studio, product or showroom. We like to hire the best and encourage all our associates to be Peloton’s brand ambassadors. Most importantly, we know that together we go far.

See More
Easy Apply
By clicking Apply Now you agree to share your profile information with the hiring company.

What are Peloton Perks + Benefits

Peloton Benefits Overview

At Peloton, we do not subscribe to a one-size-fits-all approach - our workforce is diverse, so our benefits must be, too. Our goal is to enable our team members to be their best, most authentic selves while providing inclusive benefits to them and their families in the moments that matter most. Peloton is proud to offer comprehensive health care, mental health benefits, childcare solutions, generous paternal leave, equity packages, and more to all full time team members. In the United States, we are proud to have recently extended our medicinal benefits offering to portions of our part-time populations at certain threshold of hours. All team members are eligible for a referral bonus plan, pre-paid legal assistance, product & appear discounts, and complimentary access to the Peloton digital app.

Culture
Volunteer in local community
Peloton offers paid Volunteer Time Off to enable and empower our team members to volunteer for causes that positively impact their communities.
Partners with nonprofits
Peloton has donated funds to organizations across a variety of causes, inclusive of Hunger Relief Efforts, Civil Rights Groups, and more.
Open door policy
OKR operational model
Team based strategic planning
Pair programming
Open office floor plan
Remote work program
Peloton's remote work program allows Team Members to work from home on occasion, as needed for them.
Diversity
Documented equal pay policy
Dedicated diversity and inclusion staff
Diversity manifesto
Diversity employee resource groups
Peloton Employee Resources Groups are employee-led groups that foster a diverse and inclusive workplace aligned with Peloton's organizational mission, values, goals, business practices, & overall D&1
Hiring practices that promote diversity
Health Insurance & Wellness Benefits
Flexible Spending Account (FSA)
Peloton employees can contribute up to $2750 annually to their FSA.
Disability insurance
Disability insurance covers 60% of annual salary up to $10000 monthly maximum payout.
Dental insurance
Peloton's dental plan covers up to $3000 of expenses.
Vision insurance
Health insurance
Peloton covers up to 90% of premiums for high deductible health plans.
Life insurance
Peloton's Life Insurance is equal to 2 times an employee's annual salary with a minimum coverage of $100,000.
Pet insurance
Pet insurance is a voluntary employee-paid benefit.
Wellness programs
Team workouts
Peloton team members have free access to the Peloton digital product and can take workouts anytime!
Mental health benefits
Peloton partners with Lyra to provide mental health benefits to all employees, with 25 free sessions per year.
Financial & Retirement
401(K)
In addition to benefits that provide security for you today, you can make saving for the future easy with a 401(k) plan that allows you to save a portion of your salary towards retirement.
401(K) matching
Peloton provides employees with a 401(K) matching plan managed by ADP. We match 100% of contributions up to 4% of an employee's annual gross pay.
Company equity
Employee stock purchase plan
Our Employee Stock Purchase Plan (ESPP) is an optional program that allows eligible team members to use payroll deductions to purchase Peloton stock twice a year at a discount.
Child Care & Parental Leave Benefits
Childcare benefits
Peloton partners with Bright Horizons and Urban Sitters for Backup child care assistance. Subsidized child care & family care.
Generous parental leave
Parental Leave is a Company-Paid benefit which will pay your salary following the birth, adoption, or placement of a child. Up to 18 weeks total.
Family medical leave
Peloton provides eligible team members with up to 12 weeks of unpaid, job-protected leave per year.
Adoption Assistance
Peloton reimburses for eligible adoption expenses and 18 week of paid leave.
Vacation & Time Off Benefits
Generous PTO
Hourly team members receive between 10 to 20 days per year of paid time off based on years of service.
Paid volunteer time
Peloton employees receive 16 hours per year of paid volunteer time.
Paid holidays
Paid sick days
Team Members receive 48 hours of sick time up front.
Office Perks
Commuter benefits
Peloton offers pre-tax commuter benefits for all employees for both Transit and Parking.
Company-sponsored outings
Free snacks and drinks
Some meals provided
Company-sponsored happy hours
Peloton hosts happy hours in our NYC Penthouse on occasion.
Recreational clubs
Relocation assistance
Peloton offers a comprehensive relocation policy for employees relocating.
Fitness stipend
Peloton is proud to offer all full-time team members an annual reimbursement of $500 for Wellness related events registration/sponsor fees.
Home-office stipend for remote employees
During these unprecedented times, Peloton offers remote employees the ability to reimburse purchases for their at-home office, not exceeding $500.
Onsite gym
Professional Development Benefits
Tuition reimbursement
Peloton has partnered with Gradifi to help pay down your student debt and pay for your children's future education.
Promote from within
Continuing education stipend
Peloton provides $5250 annually of financial assistance for certain education related expenses to foster & encourage the professional development of our team members.

More Jobs at Peloton

Easy Apply
By clicking Apply Now you agree to share your profile information with the hiring company.
Learn more about PelotonFind similar jobs like this