Director, Compliance & AI Governance

📋 Description

• Own AKASA’s compliance portfolio end to end (HITRUST CSF, SOC 2 Type II, HIPAA).
• Define roadmaps; drive cross-functional regulatory adoption.
• Build AI governance program using NIST AI RMF; model risk assessments and policies.
• Drive automation: GRC tooling, evidence collection across stack, AI-assisted policy drafting.
• Manage policy lifecycle, exceptions, attestations, and version control.
• Lead customer and prospect security/compliance responses; support audits and trust artifacts.

🎯 Requirements

• 8+ years in security compliance/GRC/risk; 2+ years leading a team.
• Deep HITRUST SOC 2 HIPAA knowledge; experience with AI governance like NIST AI RMF.
• Automation-first; experience with GRC platforms (Vanta/Drata/Hyperproof) and evidence automation
• Policy ownership: drafting, cross-framework mapping, review/attestation cycles.
• Customer-facing; enterprise questionnaires, audits, and security negotiations with Legal.
• Certifications such as ISO 27001/42001 or HITRUST AI; familiarity with Okta, Kandji/Iru

🎁 Benefits

• Flexible PTO
• Health, dental, vision coverage
• HSA employer contribution
• Parental leave; life insurance
• Home office stipend; internet/cell reimbursement
• Commuting benefits; holidays; 401(K)