Senior Director of Information Risk & Governance

Modern Health
Modern Health is a mental health benefits platform for employers. We are the first global mental health solution to offer employees access to one-on-one group and self-serve digital resources for their emotional professional social financial and physical well-being needs all within a single platform. Whether someone wants to proactively manage stress or treat depression Modern Health guides people to the right care at the right time. We empower companies to help all their employees be the best version of themselves and believe in meeting people wherever they are in their mental health journey.
Modern Health is backed by investors like Kleiner Perkins Founders Fund John Doerr Y Combinator and Battery Ventures and raised more than $170 million in less than two years making Modern Health the fastest entirely female-founded company in the U.S. to reach Unicorn status.
More about our culture and what you can expect when you join the team:
“It Takes a Village” culture. Modern Health has a unique and unabashed culture centered around high empathy and high accountability - with a drive to win. We are energized by bringing together the best talent in the industry to achieve audacious goals focused on making mental health a strength and priority for all.
We have an obsession to win. We are highly ambitious and passionate about the work that we do. We take pride in delivering excellence and our personal best and we continuously innovate to uniquely solve our customers’ needs.
We are accountable and can rely on each other. We are a team and hold ourselves and each other accountable. We believe in transparent communication and continuous feedback to foster a culture of trust reliability and growth.
We demonstrate empathy. We have a supportive and diverse culture where we bolster and uplift each other as we pursue our lofty goals. We encourage selflessness and a willingness to support others fostering a collaborative and respectful environment.
We exhibit a bias towards action. This is a fast-paced environment. We jump into problems and initiate solutions. We empower our people to make decisions and experiment iterate and repeat until we get it right.

Modern Health is a fully remote workforce and a hyper-growth company that is often recognized for its excellence winning awards such as World’s Most Innovative Companies of 2023 by Fast Company Top 25 Companies of San Francisco 2023 and 2023 Well-Being Trailblazer Award. To protect our culture and help our team stay connected we require overlapping hours for everyone. While many roles may function from anywhere in the world see individual job listing for more US based team members who live outside the Pacific time zone are expected to work at least six hours between 8 am and 5 pm Pacific time each workday.
We are looking for driven creative and passionate individuals to join in our mission. An inclusive and diverse culture are key components of mental well-being in the workplace and that starts with how we build our own team. If you're excited about a role we'd love to hear from you!

The role:
Modern Health is scaling into enterprise and regulated clients health plans financial services and global employers whose trust depends on demonstrable information technology risk governance. Much of Modern Health's information technology risk and governance framework already exists policies vendor intake access reviews a trust center an answer library a risk register incident response and incident tooling. What this role adds is the senior ownership and oversight to establish and run our cross-functional governance programs connecting those assets into coherent evidenced enterprise-credible programs and representing our posture to strategic clients auditors and assessors.
The Senior Director Information Risk & Governance is the company’s second-line-of-defense leader for information technology risk an independent risk governance and assurance function reporting to the General Counsel deliberately separated from the teams that build operate and execute security and IT programs. The role partners closely with the Head of Security Engineering who continues to run operational security execution certification readiness audit evidence production and day-to-day customer security response workflows. This role provides program governance risk decision support escalation remediation-plan calibration executive reporting and client-facing support.
What you'll do:
Information technology risk governance. Own the information-security risk register a leadership-approved risk appetite and tolerance model and the exception/risk-acceptance register. Drive cross-functionally ratified decision rights (RACI) for risk acceptance questionnaires incidents vendor exceptions and contractual security commitments. Deliver the monthly executive information-risk report and periodic board reporting and own the information-risk and AI-risk workstream of the enterprise Risk Committee (chaired by the Compliance & Privacy Officer).
Risk-balanced business prioritization.