Compliance Lead

2 months ago
Full-time
Senior
Cybersecurity
Aegis Ventures

Aegis Ventures

Aegis Ventures operates as a next generation venture studio that collaborates with entrepreneurs and industry leaders to create, launch, and expand innovative companies aimed at addressing significant societal challenges.

Professional Services
51-250
Founded 2020

Description

  • Own and operationalize Avandra's compliance program across HIPAA, HITRUST, and SOC 2.
  • Maintain the risk register and conduct company-wide risk assessments on a regular cadence.
  • Author, publish, and maintain security and compliance policies and procedures.
  • Evaluate emerging frameworks such as ISO 27001 and NIST CSF as the company scales.
  • Coordinate evidence collection, gap assessments, and control testing across cross-functional teams.
  • Manage audit relationships with external assessors and compliance automation platforms.
  • Own the vendor security intake and assessment process.
  • Respond to customer security questionnaires, RFPs, and due diligence requests.
  • Lead compliance assessments for acquisition targets and evaluate their PHI handling, certifications, and audit findings.
  • Own post-acquisition compliance integration planning, remediation, and rollout across subsidiaries.
  • Develop and deliver company-wide compliance training, including onboarding for acquired teams.

Requirements

  • 5+ years of hands-on compliance experience at a B2B SaaS or healthcare technology company.
  • Demonstrated ownership of HIPAA compliance programs and working knowledge of HITRUST (i1 or r2).
  • SOC 2 Type II experience, including coordinating evidence, managing auditors, and closing gaps.
  • Ability to work cross-functionally with Engineering on technical controls.
  • Strong written communication for policy writing, questionnaire responses, and executive summaries.
  • Self-starter mentality with the ability to build structure in ambiguity.
  • Experience supporting compliance assessments or integration work in M&A contexts (preferred).
  • Familiarity with multi-entity or subsidiary compliance program management (preferred).
  • CISSP, CISM, HCISPP, or equivalent certification (preferred).
  • Experience with compliance automation tools such as Vanta, Drata, or Tugboat Logic (preferred).
  • Familiarity with PHI data flows, health data integrations, and healthcare data contracts (preferred).
  • Prior experience at a growth-stage startup building a compliance program from the ground up (preferred).

Benefits

  • Competitive salary.
  • Equity package.
  • Comprehensive benefits.
  • Hybrid work flexibility.
  • Meaningful impact on healthcare breakthroughs and patient outcomes.
  • Career-defining exposure to strategy, operations, fundraising, M&A, and scaling.
  • Opportunity to work with an experienced founder and strong investor partners.
  • Values-driven culture.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

IT Security & Compliance Lead (Amsterdam, NLD)

B Lab 51-250 Diversified Consumer Services

B Lab is seeking a full-time IT Security & Compliance Lead in Amsterdam to establish consistent security governance, compliance, and risk management across its consolidating global network.

Cybersecurity Penetration Testing Salesforce
3 days, 5 hours ago

IT Security & Compliance Lead (São Paulo, BR)

B Lab 51-250 Diversified Consumer Services

B Lab is seeking an IT Security & Compliance Lead in São Paulo to establish consistent security governance, compliance, risk management, and incident-response practices across its consolidating global nonprofit network.

Cybersecurity Penetration Testing Salesforce
3 days, 5 hours ago

Regulatory Affairs Specialist

MANSCAPED 51-250 Personal Products

MANSCAPED is seeking a Regulatory Affairs Specialist to support the Senior Manager, Regulatory by maintaining global compliance for its cosmetics, personal care, grooming, electrical, battery, accessory, and packaging products.

3 days, 6 hours ago

ABA Director of Credentialing

Coyne & Associates 51-250 Diversified Consumer Services

The Director of Credentialing & Provider Enrollment will lead credentialing, enrollment, contracting, compliance, and accreditation operations for a growing ABA therapy organization serving children and adolescents across four affiliated companies in 10 states.

Salesforce
3 days, 6 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers