Director, Compliance & AI Governance

The role

The Director of Compliance & AI Governance will own and evolve the compliance program, including HITRUST, SOC 2, and HIPAA. This person will build an AI governance program and drive compliance automation across the company.

What you will do

• Own AKASA's compliance certification portfolio including HITRUST CSF, SOC 2 Type II, and HIPAA
• Define compliance roadmaps and ensure org-wide adoption
• Build an AI governance program grounded in the NIST AI RMF
• Drive compliance automation through GRC and continuous control monitoring tooling
• Own the full policy lifecycle including authoring, review, and attestation
• Act as the compliance face for customers and prospects during sales cycles and audits
• Oversee vendor and third-party risk management
• Manage security awareness and HIPAA training programs
• Partner with Legal and Security leadership on security-related contractual obligations

Required qualifications

• 8+ years experience in security compliance, GRC, or risk management
• 2+ years leading a team or function
• Hands-on expertise across HITRUST CSF, SOC 2 Type II, and HIPAA Security and Privacy Rules
• Experience with emerging AI governance frameworks like NIST AI RMF
• Experience with GRC and continuous control monitoring platforms
• Experience with end-to-end policy ownership
• Comfort with enterprise security questionnaires and sales-cycle support

Nice to have

• Healthcare SaaS, health tech, or AI startup experience
• HITRUST CSF (r2 preferred)
• Direct experience achieving or maintaining ISO 27001, ISO 42001, or HITRUST AI certifications
• Familiarity with the technical side of a modern security stack (Okta, MDM platforms like Kandji/Iru, SentinelOne, Nightfall, AWS)
• Experience with privacy regulations such as CCPA/CPRA, state health data laws, or GDPR
• Implementing Compliance Automation Tools and Trust Centers like Drata or Vanta
• Scripting or low-code automation skills (Python, Zapier, Tray.io)
• Relevant certifications such as CISSP, CISA, CIPP/US, HCISPP, or HITRUST CCSFP

Benefits

• Flexible paid time off (PTO)
• Expansive coverage for health, dental, and vision
• Employer contribution to Health Savings Accounts (HSA)
• Generous parental leave policy
• Full employee coverage for life insurance
• Home office stipend
• Cell phone/internet reimbursement
• Commuting benefits
• Company-paid holidays
• 401(K) plan

About the company

AKASA is building the future of healthcare by developing AI-native solutions for complex healthcare work. Their products help health systems capture and communicate the full patient clinical journey.