Compliance Analyst

This is a Fully Remote Job

About Our Client:

The organization operates in the digital health industry, focusing on metabolic, hormonal, and longevity care. It addresses challenges in delivering integrated, patient-centered healthcare by providing telehealth services, compounded medications, lab testing, and wellness support through a shared technology and AI platform. The organization serves patients across more than 35 states, enabling clinicians to concentrate on patient care while offering personalized, proactive health solutions.

About the Opportunity:

The COMPLIANCE ANALYST role is critical for maintaining and advancing the organization's compliance programs, particularly SOC 2 and emerging ISO 42001 AI governance frameworks. This position ensures continuous audit readiness and manages compliance controls, evidence, and remediation efforts across multiple teams. The analyst supports risk management and vendor governance, contributing to the organization's ability to deliver secure and compliant healthcare services.

Responsibilities:

• Coordinate evidence collection, validation, and remediation for SOC 2 compliance.
• Maintain year-round audit readiness and support SOC 2 Type 2 audits.
• Identify and address control gaps and escalate issues as needed.
• Operate and maintain the Drata compliance platform and related integrations.
• Support development and maintenance of ISO 42001 AI Management System policies and controls.
• Manage AI system inventories and coordinate AI risk and impact assessments.
• Maintain SaaS and vendor technology inventories and support vendor compliance reviews.
• Oversee risk registers and support security and risk assessments.
• Facilitate access reviews and track remediation.
• Organize documentation and coordinate audit responses.
• Develop compliance and IT dashboards to report on key metrics and risks.

Requirements:

• 2 to 5 years of experience in compliance, GRC, information security, IT audit, or risk management.
• Knowledge of SOC 2 and information security controls.
• Experience with continuous compliance platforms such as Drata, Vanta, or Secureframe.
• Ability to coordinate evidence collection and remediation across teams.
• Familiarity with NIST, ISO 27001, or CIS Controls.
• Strong organizational and communication skills.
• Ability to work independently and resolve issues proactively.

Preferred:

• Experience with ISO 42001 or AI governance.
• Knowledge of AI risk assessments and emerging technology risks.
• Healthcare compliance experience, including HIPAA.
• Certifications such as CISA, CISM, CRISC, Security+, ISO 27001, or ISO 42001.

Pay Range and Compensation Package:

• The pay range and compensation package for this role will be determined based on the candidate's experience, skills, and other relevant factors.

Benefits & Perks:

• Medical insurance
• Vision insurance
• Dental insurance
• 401(k) with company match
• Paid time off including PTO, Flex days, and holidays

Equal Opportunity Statement: Our client is an equal opportunity employer. They celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, or national origin.

Note:

TalentHop is a recruitment partner of this role. Please note that all employment decisions, including candidate assessment, interviews, hiring, compensation, and employment terms, are made exclusively by the hiring employer.