Staff Security Engineer, GRC

Oscar Health·New York, New York, United States·Posted 20 August 2026

Apply with a tailored CV View on Oscar Health's site

About the role

Hi, we're Oscar. We're hiring a Staff Security Engineer, GRC to join our Information Security Team. Oscar is the first health insurance company built around a full stack technology platform and a relentless focus on serving our members. We started Oscar in 2012 to create the kind of health insurance company we would want for ourselves—one that behaves like a doctor in the family. About the role: As a Staff GRC Engineer, you will be a cloud-aware governance, risk, and compliance expert supporting Oscar's healthcare technology environment, with a specific focus on CMS Enhanced Direct Enrollment (EDE) platforms and stage 3 certification readiness. You will translate CMS EDE requirements, FedRAMP Moderate-aligned expectations, and NIST SP 800-53 controls into practical control designs, compliance-as-code patterns, evidence workflows, and risk management practices for AWS-hosted and Azure-hosted systems. You will operate as a senior subject matter expert who can partner directly with engineering, security, legal, compliance, product, and CMS-facing stakeholders to keep regulated platforms audit-ready while enabling secure delivery. You will report into the CISO. Work Location: This…

This is a summary of the advert. The full description and the application are on Oscar Health's careers site.

Apply faster with Prepper

A version of your CV tailored to this Staff Security Engineer, GRC role.
A cover letter written from your CV and this advert.
Prepper can fill in Oscar Health's application form and send it once you approve.
The application saved in your tracker, with reminders to follow up.

Start free

More roles at Oscar Health

Prepper is independent and not affiliated with Oscar Health. Roles are listed from the employer's public careers system and removed when they close.