1 день назад
Compliance Lead (Healthcare AI)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Compliance Lead (Healthcare AI): Building and operationalizing an audit-ready compliance program for a medical imaging data cloud with an accent on HIPAA, HITRUST, SOC 2, vendor risk, and M&A integration. Focus on coordinating audits, assessing acquired entities, integrating subsidiaries into a unified control framework, and translating regulatory requirements into actionable policies and training.
Location: Columbus, Ohio; Irvine, California; or Remote within the U.S.
Company
is building a medical imaging data cloud that aggregates and de-identifies clinical imaging data for biopharma research, medical device innovation, AI model training, and patient care.
What you will do
- Own the compliance roadmap across HIPAA, HITRUST, and SOC 2, including certification and recertification timelines.
- Maintain the risk register, conduct company-wide risk assessments, and develop security and compliance policies.
- Coordinate evidence collection, gap assessments, control testing, external audits, and compliance-automation platform relationships.
- Manage vendor security assessments and respond to customer questionnaires, RFPs, and due diligence requests.
- Assess acquisition targets and lead post-acquisition compliance integration, remediation planning, and certification consolidation across subsidiaries.
- Develop company-wide compliance training and communicate regulatory requirements to non-compliance teams.
Requirements
- 5+ years of hands-on compliance experience in a B2B SaaS or healthcare technology company.
- Experience owning HIPAA compliance programs and working knowledge of HITRUST i1 or r2.
- Experience with SOC 2 Type II evidence coordination, auditor management, and remediation of control gaps.
- Ability to work cross-functionally with Engineering on technical controls.
- Strong written communication skills for policy writing, security questionnaires, and executive summaries.
- Self-starter approach with the ability to build structure in ambiguous environments.
Nice to have
- Experience with M&A compliance assessments or integration work and multi-entity compliance programs.
- CISSP, CISM, HCISPP, or an equivalent certification.
- Experience with Vanta, Drata, Tugboat Logic, or similar compliance-automation tools.
- Familiarity with PHI data flows, healthcare data integrations, and healthcare data contracts.
- Experience creating a compliance program at a growth-stage startup.
Culture & Benefits
- Competitive salary, equity, and comprehensive benefits.
- Hybrid work flexibility.
- Opportunity to contribute to healthcare innovation, medical breakthroughs, and AI diagnostics.
- Exposure to strategy, operations, fundraising, M&A, and company scaling.
- Values-driven culture focused on integrity, accountability, empathy, curiosity, and patients first.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →
Похожие вакансии
3 дня назад
Director of Compliance & AI Governance
1 день назад
Senior Director of Information Risk & Governance (Healthcare)
231 300 - 272 100$
3 дня назад
Compliance Management Lead (FedRAMP)
108 960 - 130 000$
6 дней назад
Security Compliance Specialist
8 333 - 12 500$
4 дня назад
Manager, Government Compliance & Authorization (Cybersecurity)
126 180 - 154 220$
17 часов назад