Compliance Lead

The role

You will own and operationalize the compliance program by turning regulatory obligations into a scalable system. You will manage the compliance roadmap, conduct risk assessments, and handle audit readiness and vendor risk management.

What you will do

• Own Avandra's compliance roadmap across HIPAA, HITRUST, and SOC 2
• Maintain the risk register and conduct company-wide risk assessments
• Author, publish, and maintain security and compliance policies and procedures
• Evaluate emerging frameworks like ISO 27001 and NIST CSF
• Coordinate evidence collection, gap assessments, and control testing
• Manage audit relationships with external assessors and compliance-automation platforms
• Own the vendor security intake and assessment process
• Respond to customer security questionnaires, RFPs, and due diligence requests
• Conduct compliance assessments for acquisition targets
• Develop and deliver company-wide compliance training

Required qualifications

• 5+ years of hands-on compliance experience at a B2B SaaS or healthcare technology company
• Demonstrated ownership of HIPAA compliance programs
• Working knowledge of HITRUST (i1 or r2)
• SOC 2 Type II experience
• Ability to work cross-functionally with Engineering on technical controls
• Strong written communication

Nice to have

• Experience supporting compliance assessments or integration work in M&A contexts
• Familiarity with multi-entity or subsidiary compliance program management
• CISSP, CISM, HCISPP, or equivalent certification
• Experience with compliance automation tooling (Vanta, Drata, Tugboat Logic, etc.)
• Familiarity with PHI data flows, health data integrations, and healthcare data contracts
• Prior experience at a growth-stage startup where the compliance program was being created

Benefits

• Competitive salary
• equity
• comprehensive benefits
• hybrid work flexibility

About the company

Aegis Ventures is a next-generation startup studio that partners with entrepreneurs to launch and scale companies focused on artificial intelligence. Avandra Imaging aims to create the largest indexed data cloud of medical imaging to revolutionize healthcare research.