Compliance Lead

19 hours, 18 minutes ago
Full-time
Senior
Cybersecurity
Aegis Ventures

Aegis Ventures

Aegis Ventures operates as a next generation venture studio that collaborates with entrepreneurs and industry leaders to create, launch, and expand innovative companies aimed at addressing significant societal challenges.

Professional Services
51-250
Founded 2020

Description

  • Own and operationalize Avandra's compliance program across HIPAA, HITRUST, and SOC 2.
  • Maintain the risk register and conduct company-wide risk assessments on a regular cadence.
  • Author, publish, and maintain security and compliance policies and procedures.
  • Evaluate emerging frameworks such as ISO 27001 and NIST CSF as the company scales.
  • Coordinate evidence collection, gap assessments, and control testing across cross-functional teams.
  • Manage audit relationships with external assessors and compliance automation platforms.
  • Own the vendor security intake and assessment process.
  • Respond to customer security questionnaires, RFPs, and due diligence requests.
  • Lead compliance assessments for acquisition targets and evaluate their PHI handling, certifications, and audit findings.
  • Own post-acquisition compliance integration planning, remediation, and rollout across subsidiaries.
  • Develop and deliver company-wide compliance training, including onboarding for acquired teams.

Requirements

  • 5+ years of hands-on compliance experience at a B2B SaaS or healthcare technology company.
  • Demonstrated ownership of HIPAA compliance programs and working knowledge of HITRUST (i1 or r2).
  • SOC 2 Type II experience, including coordinating evidence, managing auditors, and closing gaps.
  • Ability to work cross-functionally with Engineering on technical controls.
  • Strong written communication for policy writing, questionnaire responses, and executive summaries.
  • Self-starter mentality with the ability to build structure in ambiguity.
  • Experience supporting compliance assessments or integration work in M&A contexts (preferred).
  • Familiarity with multi-entity or subsidiary compliance program management (preferred).
  • CISSP, CISM, HCISPP, or equivalent certification (preferred).
  • Experience with compliance automation tools such as Vanta, Drata, or Tugboat Logic (preferred).
  • Familiarity with PHI data flows, health data integrations, and healthcare data contracts (preferred).
  • Prior experience at a growth-stage startup building a compliance program from the ground up (preferred).

Benefits

  • Competitive salary.
  • Equity package.
  • Comprehensive benefits.
  • Hybrid work flexibility.
  • Meaningful impact on healthcare breakthroughs and patient outcomes.
  • Career-defining exposure to strategy, operations, fundraising, M&A, and scaling.
  • Opportunity to work with an experienced founder and strong investor partners.
  • Values-driven culture.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

AML Compliance Analyst

Alpaca 51-250 Capital Markets

Alpaca is hiring a Financial Crimes Analyst to support its securities and crypto compliance operations by investigating suspicious activity and helping maintain AML, sanctions, fraud, and surveillance controls.

19 hours, 18 minutes ago

Senior Director of Information Risk & Governance

Modern Health 251-1K Health Care Providers & Services

Modern Health is hiring a Senior Director of Information Risk & Governance to lead enterprise information risk, governance, and assurance programs for its healthcare and regulated-client business.

19 hours, 33 minutes ago

Head of Compliance

Gauntlet 51-200 Software Development

Gauntlet is hiring its first dedicated Head of Compliance to build and run a scalable compliance program for its onchain financial business as it expands into capital markets registrations.

19 hours, 48 minutes ago

Compliance & Sustainability Intelligence Manager (EPR)

rePurpose Global 51-250 Professional Services

rePurpose Global is hiring a remote Compliance & Sustainability Intelligence Manager to lead U.S. packaging EPR market education, customer guidance, and regulatory intelligence for consumer brands navigating evolving compliance obligations.

19 hours, 48 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers