Compliance Lead

Owning and operationalizing the compliance program, the full-time Compliance Lead will establish a scalable, audit-ready system for regulatory obligations such as HIPAA, HITRUST, and SOC 2, while working remotely or from Columbus, Ohio, or Irvine, California. Key responsibilities Manage the compliance roadmap and certification timelines, maintaining risk assessments and compliance policies Coordinate evidence collection and control testing for audits, ensuring audit-ready documentation year-round Oversee vendor security assessments and respond to customer security inquiries, representing the compliance posture to health system partners Required qualifications 5+ years of hands-on compliance experience in a B2B SaaS or healthcare technology company Proven ownership of HIPAA compliance programs and working knowledge of HITRUST Experience with SOC 2 Type II, including evidence coordination and auditor management Ability to collaborate cross-functionally with Engineering on technical controls Strong written communication skills for policy writing and executive summaries