Назад
Company hidden
1 день назад

Compliance Lead (Healthcare AI)

Формат работы
remote (только USA)/onsite
Тип работы
fulltime
Грейд
lead
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Compliance Lead (Healthcare AI): Building and operationalizing an audit-ready compliance program for a medical imaging data cloud with an accent on HIPAA, HITRUST, SOC 2, vendor risk, and M&A integration. Focus on coordinating audits, assessing acquired entities, integrating subsidiaries into a unified control framework, and translating regulatory requirements into actionable policies and training.

Location: Columbus, Ohio; Irvine, California; or Remote within the U.S.

Company

hirify.global is building a medical imaging data cloud that aggregates and de-identifies clinical imaging data for biopharma research, medical device innovation, AI model training, and patient care.

What you will do

  • Own the compliance roadmap across HIPAA, HITRUST, and SOC 2, including certification and recertification timelines.
  • Maintain the risk register, conduct company-wide risk assessments, and develop security and compliance policies.
  • Coordinate evidence collection, gap assessments, control testing, external audits, and compliance-automation platform relationships.
  • Manage vendor security assessments and respond to customer questionnaires, RFPs, and due diligence requests.
  • Assess acquisition targets and lead post-acquisition compliance integration, remediation planning, and certification consolidation across subsidiaries.
  • Develop company-wide compliance training and communicate regulatory requirements to non-compliance teams.

Requirements

  • 5+ years of hands-on compliance experience in a B2B SaaS or healthcare technology company.
  • Experience owning HIPAA compliance programs and working knowledge of HITRUST i1 or r2.
  • Experience with SOC 2 Type II evidence coordination, auditor management, and remediation of control gaps.
  • Ability to work cross-functionally with Engineering on technical controls.
  • Strong written communication skills for policy writing, security questionnaires, and executive summaries.
  • Self-starter approach with the ability to build structure in ambiguous environments.

Nice to have

  • Experience with M&A compliance assessments or integration work and multi-entity compliance programs.
  • CISSP, CISM, HCISPP, or an equivalent certification.
  • Experience with Vanta, Drata, Tugboat Logic, or similar compliance-automation tools.
  • Familiarity with PHI data flows, healthcare data integrations, and healthcare data contracts.
  • Experience creating a compliance program at a growth-stage startup.

Culture & Benefits

  • Competitive salary, equity, and comprehensive benefits.
  • Hybrid work flexibility.
  • Opportunity to contribute to healthcare innovation, medical breakthroughs, and AI diagnostics.
  • Exposure to strategy, operations, fundraising, M&A, and company scaling.
  • Values-driven culture focused on integrity, accountability, empathy, curiosity, and patients first.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →