Job Description:
• Administer and optimize compliance automation platforms such as Vanta
• Maintain continuous control monitoring and evidence collection
• Lead and support audits across multiple frameworks
• Coordinate with internal stakeholders and external assessors
• Maintain and mature compliance programs mapped to SOC 2, ISO 27001, ISO 27701, ISO 42001, HITRUST, HIPAA, NIST 800-53, and NIST AI RMF
• Interpret and apply privacy standards including HIPAA and GDPR
• Conduct risk assessments and track remediation efforts
• Manage evidence and control documentation
• Set timelines, coordinate cross-functional owners, and drive compliance deliverables to completion
• Leverage AI tools for evidence review, policy drafting, risk analysis, and reporting workflows
Requirements:
• Demonstrated experience with GRC and compliance automation applications, particularly Vanta
• Working knowledge of SOC 2, ISO 27001, ISO 27701, ISO 42001, HITRUST, HIPAA, NIST 800-53, and NIST AI RMF
• Strong understanding of HIPAA and GDPR
• Proven experience managing or supporting audits
• Structured project management experience
• Comfort and fluency with AI tools and willingness to integrate them into daily workflows
• Excellent written and verbal communication skills
• Strong attention to detail
• Relevant certifications such as CISA, CIPP, or ISO 27001 Implementer
• Experience in healthcare, wellness, or another regulated data environment
• Familiarity with AI governance and emerging AI compliance requirements
Benefits:
• Mission-driven impact
• Career growth and development opportunities
• Supportive, human-centric culture
• Wellness perks and benefits
• Medical, dental, and vision coverage
• 401(k) program with company match
• Generous paid time off programs
• Thrive Time: additional paid time off after major projects or intense periods of work
• Performance bonus
• Equity