Summary

Own end-to-end compliance program operations for a healthcare AI company, managing compliance frameworks (SOC2 Type II, HIPAA, NIST, ISO), continuously monitoring and remediating control failures, and maintaining audit-readiness. Administer Google Workspace and MDM tooling, including user lifecycle management, access controls, and endpoint compliance. Coordinate external audits, manage evidence collection, and drive remediation from detection to closure while partnering with engineering, product, and leadership to scale compliance rigor as the company grows.