DoorDash US

4 weeks ago

Senior GRC Analyst, HIPAA

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 4 hours agoStatus: Live

Job Summary

Senior GRC Analyst, HIPAA responsible for maturing HIPAA security compliance programs across DoorDash, translating legal requirements into actionable controls, performing readiness and risk assessments, and partnering with Engineering, Legal, and Security to implement scalable, audit-ready HIPAA controls across cloud, SaaS, data, and internal tooling.

Location: United States

Workplace: Remote

Employment Type: Full time

Job Function: Solutions Engineering & Sales Engineering

Seniority: Sr. Manager level

Key Responsibilities

•Lead and support HIPAA security compliance workstreams across multiple products, platforms, systems, and engineering teams.
•Turn legal requirements into actionable technical and operational control requirements.
•Perform HIPAA readiness assessments, gap analyses, risk assessments, and control design/effectiveness reviews across cloud, SaaS, data, and internal tooling environments.
•Build and maintain control mappings across HIPAA, HITRUST, SOC 2, ISO 27001, NIST 800-53, and DoorDash security standards.
•Partner with Engineering and Security Engineering to implement scalable controls across IAM, encryption, logging and monitoring, vulnerability management, secure SDLC, incident response, data retention, and access review processes.

Pay and Benefits

Salary: USD 132,600 - 195,000

Perks:401kHealth InsuranceParental LeaveWellness StipendCommuter BenefitsLife InsuranceDisability Insurance

Key Requirements

•6+ years of experience in security compliance, GRC, risk management, audit, privacy/security operations, or related information security roles.
•3+ years of hands-on experience implementing, operating, or maturing HIPAA programs in a technology, SaaS, health-tech, or highly regulated environment.
•Strong working knowledge of HIPAA Security Rule requirements and practical experience applying HIPAA safeguards to cloud, SaaS, data, and engineering environments.
•Understanding of how PHI/ePHI flows through modern systems and ability to partner with engineering on data classification, access controls, encryption, logging, retention, and secure data handling.
•Experience with adjacent frameworks such as HITRUST, SOC 2, ISO 27001, NIST 800-53, PCI DSS, GDPR or CCPA.

Experience:6+ yearsHealthcareHealthtechSaaSRegulated data

Skills:CommunicationDocumentationStakeholder managementCollaborationProblem-solving

Languages:English

Tech Stack:IAMEncryptionLoggingMonitoringCI/CDInfrastructure-as-codeCloudHIPAAPHIData classificationSecurity monitoring

Company Brief

DoorDash US

On-demand logistics platform connecting consumers with local restaurants, grocers, and retailers for food delivery, pickup, and convenience services. Operates a marketplace and last-mile delivery network while offering tools and analytics for merchants and couriers.

Industry: Online Marketplaces

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: San Francisco, United States

Founded: 2013

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

DoorDash US

4 weeks ago

Senior GRC Analyst, HIPAA

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 4 hours agoStatus: Live

Job Summary

Location: United States

Workplace: Remote

Employment Type: Full time

Job Function: Solutions Engineering & Sales Engineering

Seniority: Sr. Manager level

Key Responsibilities

•Lead and support HIPAA security compliance workstreams across multiple products, platforms, systems, and engineering teams.
•Turn legal requirements into actionable technical and operational control requirements.
•Perform HIPAA readiness assessments, gap analyses, risk assessments, and control design/effectiveness reviews across cloud, SaaS, data, and internal tooling environments.
•Build and maintain control mappings across HIPAA, HITRUST, SOC 2, ISO 27001, NIST 800-53, and DoorDash security standards.
•Partner with Engineering and Security Engineering to implement scalable controls across IAM, encryption, logging and monitoring, vulnerability management, secure SDLC, incident response, data retention, and access review processes.

Pay and Benefits

Salary: USD 132,600 - 195,000

Perks:401kHealth InsuranceParental LeaveWellness StipendCommuter BenefitsLife InsuranceDisability Insurance

Key Requirements

•6+ years of experience in security compliance, GRC, risk management, audit, privacy/security operations, or related information security roles.
•3+ years of hands-on experience implementing, operating, or maturing HIPAA programs in a technology, SaaS, health-tech, or highly regulated environment.
•Strong working knowledge of HIPAA Security Rule requirements and practical experience applying HIPAA safeguards to cloud, SaaS, data, and engineering environments.
•Understanding of how PHI/ePHI flows through modern systems and ability to partner with engineering on data classification, access controls, encryption, logging, retention, and secure data handling.
•Experience with adjacent frameworks such as HITRUST, SOC 2, ISO 27001, NIST 800-53, PCI DSS, GDPR or CCPA.

Experience:6+ yearsHealthcareHealthtechSaaSRegulated data

Skills:CommunicationDocumentationStakeholder managementCollaborationProblem-solving

Languages:English

Tech Stack:IAMEncryptionLoggingMonitoringCI/CDInfrastructure-as-codeCloudHIPAAPHIData classificationSecurity monitoring

Company Brief

DoorDash US

Industry: Online Marketplaces

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: San Francisco, United States

Founded: 2013

Website LinkedIn