About the job
Oscar Health builds technology-driven health insurance with a focus on personal, supportive experiences. Since 2012, the company has aimed to make insurance feel as approachable as working with a trusted family doctor.
Role overview
The Senior Security Engineer I, GRC joins Oscar’s Security Team to design and operate systems that deliver ongoing security assurance, actionable risk insights, and scalable compliance. This position focuses on engineering infrastructure and automation that enable the organization to demonstrate security and compliance in practice, not just through documentation or audit preparation.
What you will do
- Design and maintain systems that automate security assurance and compliance processes
- Integrate governance and control validation into system architecture
- Connect operational telemetry, engineering workflows, and risk signals to create a feedback loop for security intelligence
- Identify patterns and relationships that traditional GRC programs may overlook
- Collaborate closely with the Senior Manager of GRC
Requirements
- Background in security engineering, platform engineering, risk management, and regulatory assurance
- Ability to combine technical and compliance expertise to create scalable solutions
- Experience with automation, telemetry, and self-evidencing controls
Work location
This role is based in Oscar’s New York City office. The hybrid schedule requires three days per week in the office. Thursdays are mandatory in-office days for team meetings and events; the other two days are flexible.
Compensation and benefits
- Base salary: $163,944 to $215,176 per year
- Eligibility for equity grants and annual performance bonuses
- Access to Oscar’s unlimited vacation program
- Comprehensive employee benefits
