Compliance Lead
Core
Own and operationalize a scalable, audit-ready compliance program for a healthcare data cloud platform, managing regulatory obligations for protected health information across health system partners.
Role type
Build-level Compliance Lead (Healthcare SaaS)
Builds
A compliant, audit-ready data infrastructure for biopharma research and AI model training
Domain
Healthcare technology / Medical imaging data / HIPAA & HITRUST
Deliverable
production ML models | infrastructure
Required skills
HIPAA program ownership, HITRUST (i1/r2) working knowledge, SOC 2 Type II coordination, cross-functional technical control implementation, policy writing, risk assessment, vendor risk management, M&A compliance integration
Preferred skills
M&A compliance assessment experience, multi-entity compliance management, CISSP/CISM/HCISPP certification, compliance automation tooling (Vanta/Drata), PHI data flow familiarity, growth-stage startup compliance creation
Technologies
Vanta, Drata, Tugboat Logic
Responsibilities
Drive HIPAA, HITRUST, and SOC 2 certification timelines; maintain risk registers and conduct company-wide risk assessments; author and maintain security/compliance policies; coordinate evidence collection and gap assessments for audits; manage vendor security intake and customer security questionnaires; conduct compliance assessments for acquisition targets and lead post-acquisition integration; develop and deliver company-wide compliance training
Seniority
Senior, hands-on IC