This role combines compliance operations, infrastructure project management, and IT governance. The Compliance Analyst will own SOC 1/SOC 2 and privacy audit readiness, administer compliance platforms (Vanta), manage internal controls and IT security policies, oversee infrastructure change control and business system deployments, and coordinate cross-functional projects to maintain audit-ready posture and support enterprise sales through trust enablement.
Own end-to-end compliance operations for a healthcare AI company, including managing compliance frameworks (SOC2 Type II, HIPAA, NIST, ISO), driving control remediation to closure, administering Google Workspace and MDM, coordinating external audits, and maintaining audit-readiness. This role requires hands-on management of a compliance platform of record, continuous monitoring of compliance tests, security policy maintenance, evidence collection, and risk tracking—operating with high rigor in a fast-scaling startup without routing issues to others.
This role owns the day-to-day operation of a compliance program end to end, managing compliance frameworks (SOC2 Type II, HIPAA, NIST, ISO), continuously monitoring and remediating control failures, and administering workforce security systems (Google Workspace and MDM). The manager will coordinate external audits, maintain policies and evidence collection, track risks, and drive remediation from detection to closure without heavy delegation.… The role requires hands-on experience with compliance automation platforms and direct IT administration of identity and access management systems.
Own end-to-end compliance operations for a healthcare AI company, including managing compliance platforms (SOC2 Type II, HIPAA, NIST, ISO), administering Google Workspace and MDM, driving remediation of failing controls to closure, and coordinating external audits. Monitor compliance tests continuously, maintain security policies and evidence collection, and work cross-functionally with engineering and leadership to keep the company audit-ready at scale.… The role requires hands-on compliance platform administration (Vanta, Drata, or similar), not purely administrative ticket routing.