Senior GRC Analyst

Operations · San Francisco · Remote · FullTime · Senior level This role owns the whole governance, risk and compliance program at a health AI company, running SOC 2 audits, mapping where patient data lives, reviewing vendors and AI model providers, and answering customer security questionnaires. A strong candidate has already run a SOC 2 audit from evidence gathering to sign off, likely in a SaaS setting with a tool like Vanta or Drata, and can threat model a vendor on their own. Clear policy writing and confident work with engineering, legal and customers matter as much as the audit mechanics. How it fits the AI era Much of the evidence gathering and questionnaire work can be sped up with automation, so the job shifts toward judgment: deciding what a control really needs, interpreting what the evidence shows, and owning the auditor and customer relationship. The posting expects the analyst to use AI coding tools to check controls directly in the codebase rather than waiting on engineers, which changes how compliance questions get answered. What stays human is the risk call, the policy that people can follow, and the trust built with health system customers. How it builds AI experience The role offers direct exposure to AI governance work, including groundwork for ISO 42001 and risk review of AI model providers, which is rare hands on experience. Building it means getting comfortable using an AI coding assistant to read source code for compliance answers, and learning how model providers handle data so vendor reviews are grounded. Prior exposure to AI governance frameworks helps but the posting treats it as a nice to have. Worth showing Vanta or Drata PHI and HIPAA governance AI coding tool use This is our own read, written from the employer's posting and the company's Spotlight. The employer's posting is the source of truth for the role. About Ambience Healthcare AI that listens to clinical visits and drafts the documentation, coding and clinical checks so doctors spend less time on the screen. #J-18808-Ljbffr present of AI