Company & Culture

Welldoc®, a digital health leader revolutionizing chronic care, is integrating personalized, real-time and actionable insights into the daily lives of individuals living with chronic conditions, enabling improved health and outcomes. Welldoc’s comprehensive chronic care platformprovides multi-condition support across prediabetes, diabetes, hypertension, heart failure and weight management, with integrated mental wellbeing. Welldoc’s clinical rigor and regulatory expertise is backed by 11 FDA-clearances for type 1 and type 2 diabetes, 38 patents for our first-in-class technology and AI and over 65 publications focused on digital health engagement and outcomes. Welldoc partners with health plans, health systems, life sciences and employers with the goal of extending care, improving health and reducing costs. Welldoc continues to be recognized for our leadership, innovation and partnership across the healthcare industry. Thisyear, Welldoc was named the “Best Overall Digital Health Company” by MedTech Breakthrough, and also received the Innovation and AI excellence awards from Business Intelligence Group. For more information, visit https://welldoc.com/. Follow us on LinkedIn and Twitter .

At Welldoc, we are focused on transforming healthcare by creating an environment that fosters collaboration, learning, and innovation. We value the personalities and experiences of every one of our team members, giving everyone the opportunity to thrive as we make our mission a reality.

If you are inspired by innovation and the power of cutting-edge science to help individuals live healthier lives, we would love to hear from you!

*Welldoc Diabetes Rx/OTC is an FDA-cleared medical device (“BlueStar”), intended for use by healthcare providers and their adult patients with type 1 or type 2 diabetes. For full labeling information, visit www.welldoc.com. The other Welldoc products are non-FDA-cleared and intended to promote general wellness and education/self-management of various chronic disease states.

Job Purpose

Welldoc is looking for a Compliance Analyst to join the IT Operations teams. The Analyst will lead our organization in achieving HITRUST certification, enhance cybersecurity at Welldoc and provide necessary support for production applications.

Responsibilities

• Lead company in achieving HITRUST certification
• Identify gaps specific to HITRUST certification requirements.
• Collaborate with internal teams to customize a plan for achieving HITRUST certification.
• Develop a detailed roadmap with key milestones and timelines for HITRUST certification.
• Identify and document necessary policies, procedures, and controls to meet HITRUST requirements.
• Provide recommendations for technical solutions addressing identified security gaps.
• Coordinate with the engineering team to implement security recommendations.
• Perform routine audits to ensure ongoing compliance with security standards.
• Act as the company's security representative in key client meetings, addressing security-related queries.
• Respond to client security questionnaires and provide necessary documentation.
• Guide the company in addressing security issues and ensuring continuous improvement.

Required Skills and Experience

• Participated in previous, successful HITRUST certification
• Proven experience in leading organizations to achieve HITRUST certifications
• In-depth knowledge of HITRUST certification requirements, ISO 27001, NIST, and other relevant security standards
• Experience in general security practices and implementation of security controls
• Ability to implement information security requirements for IT systems through the Risk Management Framework (RMF)
• Strong project management skills and the ability to coordinate cross-functional teams
• Technical proficiency in security technologies and the ability to recommend effective solutions
• Excellent communication skills for both internal and external collaboration and interaction
• Experience with data analysis using tools like Sumologic, Splunk. (preferred)
• Experience in cloud technologies such as Microsoft Azure or Amazon Web Services (preferred)
• Familiarity with security tools and technologies such as intrusion detection systems (IDS), firewall management, vulnerability assessment tools, etc. (preferred) 

Welldoc operates in ISO 13485 and MDSAP regulated and HITRUST and SOC 2 Type II compliant environments. Therefore, it is expected that all employees will have either, prior experience working in those environments or, will be trained to understand the requirements needed to work and support those requirements and culture as they relate to individual roles and responsibilities.

Education

Bachelor’s degree in computer science, Information Technology, or a technology related field

The following are preferred certifications:

• Security
• CISSP
• CCSP
• CISA
• CISM

Compensation & Benefits

Welldoc offers a competitive compensation package including generous PTO, pre-IPO stock options, medical insurance, dental plan, vision care, flexible spending account, and 401(k) benefits.

Upon receipt of a conditional offer of employment, you may be required to complete and clear a multi-panel drug screening process. This screening is in connection with requirements set by certain of the Company’s customers, with which you may be working in this role, and will at all times be administered all applicable laws. 

Welldoc is an equal opportunity employer and prohibit discrimination and harassment of any kind. We offer an inclusive workplace and will not tolerate discrimination against any job candidate or employee due to age, race, religion, color, ethnicity, national origin, gender, gender identity/expression, sexual orientation, membership in an employee organization, medical condition, family history, genetic information, veteran status, marital status or parental status.