Security Program Manager

Company Overview Function Health is the AI operating system for health, designed to empower people to live 100 healthy years. We are redefining how individuals understand, measure, and improve their health by moving beyond reactive care and enabling proactive, data‑driven insight into human biology. Function has been recognized as one of Fast Company’s Most Innovative Companies of 2024 and is venture‑backed by Andreessen Horowitz (a16z). Hundreds of thousands of members have joined Function to take control of their health.

Role We are building a lean, automation‑first compliance program that is agile enough to adapt to both security and privacy requirements. As a Security Program Manager, you will support and execute our compliance operations, partner with cross‑functional teams to enable compliant product growth and unblock business deals, and help ensure our controls and policies scale with the business. This hands‑on, impact‑driven role involves audit readiness, day‑to‑day compliance and privacy operations, and meeting trust expectations of our members, partners, and regulators.

Key Responsibilities

Execute SOC 2 Type II and HIPAA compliance operations, including evidence collection, control testing, and audit readiness.

Coordinate audit activities with auditors, external assessors, and internal stakeholders under the direction of compliance leadership.

Maintain and update a unified control framework that maps SOC 2, HIPAA, and future frameworks (e.g., HITRUST).

Drive vendor and third‑party risk management, including onboarding reviews, risk assessments, and BAA/DPA tracking.

Understand privacy obligations (HIPAA Privacy Rule, GDPR, state laws) and design solutions with a privacy‑first focus.

Partner with Sales and Legal to support business deals, including security questionnaires and contractual agreements.

Execute quarterly compliance rituals: access reviews, risk register updates, policy acknowledgments, and training compliance.

Translate regulatory requirements into engineer‑friendly tickets, policy updates, and compliance summaries.

Identify and implement opportunities for automation in compliance workflows (evidence collection, access certifications, vendor reviews).

Coordinate privacy operations, including data retention, deletion, and handling of member data requests.

Build awareness across the business so compliance and privacy are seen as enablers, not blockers.

Qualifications / Skills

4–7 years of experience in compliance, GRC, or risk management, ideally in SaaS or health‑tech.

Strong knowledge of SOC 2 and HIPAA; familiarity with privacy frameworks such as GDPR, CCPA/CPRA, or HITRUST.

Experience supporting audits end‑to‑end and preparing documentation for external parties.

Experience coordinating across functions (Engineering, IT, Legal, Ops) to implement and sustain controls.

Ability to connect regulatory requirements to business context and communicate trade‑offs clearly to technical and non‑technical stakeholders.

Familiarity with compliance automation tools (Vanta, Tugboat Logic, ConductorOne) and cloud environments (Okta, GCP, GitHub).

Strong communication skills; able to draft policies, auditor‑facing documentation, and compliance summaries.

Ability to work cross‑functionally to support secure, compliant patterns without slowing down business goals.

Bonus: experience with healthcare data protection or supporting privacy programs in regulated industries.

Core Values

Ruthless Prioritization

We don’t let perfection get in the way of progress.

We move quickly to drive value, not perfection.

We prioritize what drives impact.

We never compromise on standards of excellence.

Member‑First, Always

We design and deliver like we’re caring for someone we love.

We create a calendar‑friendly, actionable, human experience.

We prioritize responsiveness, peace of mind, and outcomes.

We empower members with truth, clarity, and care.

One Team, Moving Fast

We are aligned in purpose, prioritization, and speed.

We gather diverse perspectives to make informed decisions.

We clear paths for each other and move fast together.

We communicate clearly and respectfully, rallying around shared goals.

Radical Ownership, Relentless Execution

We don’t just ship—we own outcomes and drive results.

We act with urgency and precision.

We anticipate, initiate, and follow through.

We meet challenges with grit and pragmatism.

We embrace new tech to deliver better outcomes.

Mission Over Ego

We are ruthlessly aligned to our mission—and leave ego at the door.

We disagree and commit.

We don’t tolerate politics or withholding information.

We operate with honesty, transparency, and respect.

Sustained Integrity in Every Detail

We earn trust by obsessing over accuracy, quality, and clarity in everything we do.

We prioritize clinical precision—data must be right.

We sweat the details because outcomes depend on them.

Why You’ll Love Working With Us We value our team at Function and offer a competitive salary and benefits package, flexible working hours, and a dynamic work environment where creativity and innovation are encouraged. If you are a highly motivated and experienced individual who is passionate about using technology to improve people’s lives, we would love to hear from you.

At Function, we celebrate diversity and are committed to building a diverse and inclusive workforce. As an equal‑opportunity employer, we do not discriminate on the basis of race, color, gender identity, ancestry, religion, age, sexual orientation, national origin, disability, marital status, Veteran status, or any other occupationally irrelevant criteria.

Important Notice Legitimate communication from the Function Health team will always come from an email address ending in @functionhealth.com. Function Health will never request personal information such as banking details or payment during the hiring process. Please be cautious of communications or job offers that come from other email domains, instant messaging platforms, or unsolicited calls. If you ever have doubts about the legitimacy of a communication, please reach out to us directly at talent@functionhealth.com.

#J-18808-Ljbffr