Compliance Lead

Job Summary

Owning and operationalizing the compliance program, the full-time Compliance Lead will establish a scalable, audit-ready system for regulatory obligations such as HIPAA, HITRUST, and SOC 2, while working remotely or from Columbus, Ohio, or Irvine, California.

Key responsibilities

• Manage the compliance roadmap and certification timelines, maintaining risk assessments and compliance policies
• Coordinate evidence collection and control testing for audits, ensuring audit-ready documentation year-round
• Oversee vendor security assessments and respond to customer security inquiries, representing the compliance posture to health system partners

Required qualifications

• 5+ years of hands-on compliance experience in a B2B SaaS or healthcare technology company
• Proven ownership of HIPAA compliance programs and working knowledge of HITRUST
• Experience with SOC 2 Type II, including evidence coordination and auditor management
• Ability to collaborate cross-functionally with Engineering on technical controls
• Strong written communication skills for policy writing and executive summaries